Selfie Studio 2.17 contains a buffer overflow within the Resize Image function that can be triggered by a local user supplying a very long string in the New Width or New Height field. The overflow crashes the application, resulting in a denial of service. The weakness is a classic buffer overflow identified as CWE‑787 and has no impact on confidentiality or integrity.

Pixarra’s Selfie Studio component is affected, specifically version 2.17. Only the local installation of the application is impacted; no remote or network component is involved.

The CVSS score of 6.9 indicates a medium severity vulnerability. EPSS data is not available and the issue is not listed in CISA’s KEV catalog, suggesting it is not a known widely exploited flaw. Because the exploitation requires direct interaction with the Resize Image form, the attack vector is local. An attacker can cause a crash simply by entering a long string, but does not gain elevated privileges or system access. Overall risk is moderate due to the limited scope but the ease of exploitation warrants rapid action.