TwistedBrush Pro Studio 24.06 incorporates a buffer size mismanagement flaw (CWE‑131) in its Script Recorder component. By supplying an excessively large string—500,000 characters—in the Description field of the Script Recorder dialog, a local attacker can cause the application to crash. The crash halts all studio operations until the program is restarted, resulting in a denial of service for the affected user or workstation.

The vulnerability affects Pixarra’s TwistedBrush Pro Studio version 24.06. No other versions or closely related products are identified as vulnerable in the publicly available data.

The CVSS score of 6.9 indicates moderate severity, while an EPSS score of less than 1% suggests that exploitation is unlikely under current conditions. The flaw is not listed in the CISA KEV catalog. The attack vector is local, requiring the attacker to run the program and input the oversized string into the Script Recorder dialog. The impact is limited to availability; the flaw does not enable privilege escalation or information disclosure.