The vulnerability is a buffer overflow in the Serial Code registration field of Magic Iso Maker 5.5 build 281, allowing local attackers to submit an oversized 5000‑byte input that causes the application to crash, leading to a denial of service. This weakness is classified as CWE-787, a classic buffer overflow that can be triggered by user‑supplied data during registration.

Magic Iso Maker version 5.5 (build 281) from the vendor Magiciso is affected. The CPE string confirms this single product and version.

The CVSS score is 6.9, indicating moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. Exploitation requires local access to the machine; an attacker needs to manually craft a file with 5000 bytes and paste it into the Serial Code field during registration to trigger the crash. No remote code execution or privilege escalation is possible based on the information provided.