Technical impact
TwistedBrush Pro Studio version 24.06 contains a vulnerability that allows a local attacker to crash the application by importing a specially crafted .srp script file. The malicious file includes an excessively large buffer, and when it is loaded through the Script Player interface the program overflows and terminates unexpectedly, causing a denial of service for the user. This weakness is a classic example of a buffer overflow (CWE‑775).
Affected Systems
Pixarra’s TwistedBrush Pro Studio 24.06 is the only version listed as affected. No other versions or variants are documented. Users running this edition of the software should verify if they are vulnerable.
Risk and Exploitability
The CVSS score of 6.9 indicates moderate severity, and the EPSS score of less than 1 % suggests low exploitation likelihood. The vulnerability is accessible only to local users with permission to import files, so it requires foothold on the host. Because it is not listed in the CISA KEV catalog, there is no evidence of active widespread exploitation. Nonetheless, the potential to cause service interruption for creative professionals warrants attention.
