Bome Restorator 1793 contains a buffer overflow vulnerability in the Name field that allows local attackers to crash the application by supplying an excessively long string exceeding 4000 bytes. The overflow results in an application crash, causing a denial of service that affects the ability of users to edit or manage projects through Restorator. The weakness is identified as CWE‑120, reflecting an unbounded buffer copy that can be leveraged by an attacker with access to the local system.

The affected product is Bome Restorator version 1793. No other versions or updates are listed as affected, so organizations using this specific build of Restorator should verify their installations and check for any newer releases from Bome that may have fixed the issue.

The CVSS score of 6.9 indicates a medium to high impact severity, while the EPSS score of less than 1% suggests that the vulnerability is only rarely exploited. The vulnerability is not listed in the CISA KEV catalog, further implying limited current exploitation activity. Because the attack vector is local, an attacker needs to be able to execute a program on the affected machine; however, once the buffer overflow is triggered, the application simply terminates, making it an easy-to-exploit denial of service if an attacker is present on the system.