Easy MP3 Downloader 4.7.8.8 contains a buffer overflow that allows a local attacker to crash the program by entering an overly long unlock code during startup. The overflow occurs when the application copies a user‑supplied 6000‑character string into a fixed‑size buffer, causing the program to terminate unexpectedly. The resulting denial of service denies legitimate users the ability to access the application.

The vulnerability affects the Easy MP3 Downloader application version 4.7.8.8. No other vendors or products are listed as affected by the CNA. The issue is confined to this specific version of the program.

The CVSS score of 6.9 indicates moderate severity, while the EPSS score of less than 1% suggests a low probability of exploitation in the wild. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Attackers must have local access to launch the application and provide the malicious unlock code at startup, so the attack vector is local and requires user interaction or a compromised machine running the software. No commercial exploit is publicly documented beyond the reference to exploit‑db, indicating that the risk to unpatched systems remains lower than high‑severity remote attacks.