Notebook Pro 2.0 allows a local attacker to crash the application by providing an excessively long notebook name. The flaw occurs when a user creates a new notebook and pastes a string of 500 or more characters into the name field, causing the program to crash on creation or saving. The issue is a classic input validation problem, reflected by CWE-789, and results in a temporary loss of availability of the application for the offending user or process.

The product impacted is Stokedonit Notebook Pro version 2.0. No narrower version range is known beyond this major/minor release, and no other Stokedonit products are listed as affected.

The CVSS score of 6.9 indicates medium severity, and the exploit probability is currently unknown as the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Attackers must have local access to the system and a user account that can launch the application, making the exploit straightforward for a local user. Such local exploitation can readily cause the application to crash, denying service to the user and potentially disrupting workflow or data input.