Folder Lock 7.7.9 contains a buffer overflow in the serial number registration field that allows a local attacker to crash the application by submitting an oversized payload. The overflow occurs when a user enters a 6000‑byte buffer into the 'Serial Number and Registration Key' field, triggering a denial of service. This is a classic memory corruption vulnerability (CWE‑787) that results in application termination but does not grant code execution or compromise system integrity.

The affected vendor is Newsoftwares, product Folder Lock 7.7.9. The CVE specifies this exact version as vulnerable; no additional versions are listed in the provided data.

The CVSS score of 6.9 indicates medium to high severity, while the EPSS score of less than 1% indicates very low exploitation probability under current conditions. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access – the attacker must be able to run the application or input data into it, making it a local denial‑of‑service condition. Because it affects only the application and not the underlying operating system or other services, the overall risk to the broader system is limited, but it can disrupt user workflows and potentially lead to data loss if unsaved changes are discarded.