PicaJet FX 2.6.5 is vulnerable to a denial of service condition that is triggered when a local user supplies an oversized buffer—up to 6000 bytes—into the Registration Name and Registration Key fields via the application’s Help menu. This input overflows the memory buffer used to store the registration data, causing the application to crash. The weakness is a classic buffer overflow under CWE-120, leading to service disruption rather than data exfiltration or privilege escalation.

The problem affects the Picajet PicaJet FX product, specifically version 2.6.5. Any installation of this version that runs the registration dialog is vulnerable; users who have local access to the application can trigger the crash.

The CVSS score of 6.9 indicates a medium severity denial of service vulnerability. The EPSS score of less than 1% suggests that exploitation of this flaw is considered unlikely at present. The vulnerability is not listed in the CISA KEV catalog. Attackers need local access to the application and must trigger the registration dialog to submit the oversized payload, so the attack surface is limited to the local user environment and the application's graphical interface.