Easy PhotoResQ 1.0 contains a buffer overflow that can be triggered by local users who supply an excessively long string in the Folder/filename field of the File Options dialog. The overflow occurs when a 6000‑byte payload is entered, causing the application to crash and preventing further use. This flaw is classified as CWE‑120 and results in a denial of service local to the affected workstation.

The vulnerability is limited to Hdtune’s Easy PhotoResQ application, specifically version 1.0. Any installation of this product exposed to local users is susceptible. No other vendors or product versions are documented as affected.

The CVSS score of 6.9 indicates moderate severity, while the EPSS score of less than 1% reflects a low probability of exploitation. The security advisory is not listed in the CISA KEV catalog. Exploitation requires local access and user interaction to supply the malicious filename; it does not raise privileges or allow remote compromise. Consequently, the impact is confined to the availability of the application on an individual machine, but a crashed instance could disrupt workflows or user experience if the tool is mission‑critical.