The vulnerability resides in the video converter component of JetAudio 8.1.7, where a buffer overflow can be triggered by providing an oversized 512‑byte string in the File Naming field. When the user invokes the Preview button, the application crashes, resulting in a denial of service that affects only the local instance of the program. This overflow is a classic CWE‑787 local‑stack buffer overflow and could be leveraged by an attacker with local access to disrupt the service.

Jetaudio’s Convert Video jetAudio product, specifically version 8.1.7, is impacted. No other JetAudio versions or products were identified as vulnerable in the data provided.

The CVSS score of 6.8 places this issue in the medium severity range. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed widespread exploitation yet. The attack vector is inferred to be local, as the user must supply a malicious file to the application’s File Naming field and trigger a Preview. If an attacker has local access, they could readily cause the crash; however, remote exploitation would require additional vulnerability or privileged action to deliver the file.