Drive Power Manager 1.10 contains a local buffer overflow that can be triggered by entering a string longer than the expected limit in the Name field. The overflow corrupts memory and causes a crash, resulting in a denial of service. The flaw belongs to CWE‑120, a classic buffer copy error.

This issue affects the Hdtune Drive Power Manager application, version 1.10, available for Windows platforms. Only the specified 1.10 release is confirmed vulnerable.

The CVSS score of 6.8 indicates moderate severity, with an EPSS score below 1 % showing a very low probability of exploitation. The vulnerability is local, requiring the attacker to have access to the machine where Drive Power Manager runs. It is not listed in the CISA KEV catalog, which further reduces its immediate threat. However, because the denial-of-service can be easily triggered by a large payload, it can be used to disrupt operations or as a vector in a larger attack chain.