RarmaRadio 2.72.3 includes a flaw in the Username field that accepts an excessively long input. Submitting a 5000‑byte buffer through Settings → Network triggers a crash, causing the application to terminate. The failure results in a loss of availability for users of the affected instance, but does not compromise confidentiality or integrity.

The vulnerability affects the Raimersoft RarmaRadio application, specifically version 2.72.3 deployed on user systems. No other versions or products are listed as affected.

The CVSS base score is 6.9, indicating moderate severity. The EPSS score is below 1%, suggesting low likelihood of exploitation in the wild. The issue is not present in the CISA KEV catalog. Attackers would need local access to the machine to enter the Settings interface and provide the oversized input; remote exploitation is not supported by the available information.