The vulnerability exists in Deluge 1.3.15 where an attacker can cause a crash by entering an overly long string into the Webseeds field during torrent creation. This trigger leads to a denial of service that terminates the application process. The weakness involves a buffer overrun, categorized as CWE-1260, and it affects availability by interrupting service.

Deluge is a cross‑platform torrent client. The affected version is 1.3.15 released by the project's development team. Users running this exact release on any supported platform are impacted. No other versions are listed as vulnerable.

The CVSS v3 score of 6.9 indicates medium severity. EPSS data is not available, and the vulnerability is not in CISA's KEV catalog. The attack appears to be local, requiring the attacker to have access to the host to input the malicious torrent file. Given the local nature and lack of remote code execution, the risk is primarily service disruption, but the medium score suggests that a determined local adversary could reliably bring the application down.