TwistedBrush Pro Studio version 24.06 contains a buffer overflow vulnerability in its Resize Image function. By supplying an excessively long string into the New Width or New Height fields, a local attacker can overflow a buffer (CWE-787) and cause the application to crash. This leads to a denial of service without granting remote code execution or broader system compromise.

The affected product is Pixarra TwistedBrush Pro Studio, specifically version 24.06. No other affected versions are listed in the advisory.

The CVSS score of 6.9 indicates moderate to high severity, but the EPSS score of less than 1 % suggests exploitation is unlikely in the wild. The vulnerability is not listed in the CISA KEV catalog, indicating no widely known or actively leveraged exploits. Attackers must have local access to the victim system to trigger the buffer overflow; remote exploitation is not supported by the available data.