Tree Studio 2.17 contains a denial‑of‑service flaw that enables a local user to crash the program by typing arbitrary characters into the keyboard interface while the application is running. The malformed input causes the software to become unresponsive or terminate abnormally, disrupting normal workflow. This weakness is classified as improper input validation, identified by CWE‑168.

The vulnerability affects Pixarra Tree Studio version 2.17 on any operating system where the application is installed and executed. No other versions are listed as vulnerable.

With a CVSS score of 6.9 the severity is moderate, and the EPSS score of less than 1% suggests a low likelihood of exploitation in the wild. The flaw is not included in the CISA KEV catalog, indicating no known widespread use. Because the attack requires local access and only the keyboard input interface to inject malformed data, a malicious user can temporarily crash the software, potentially leading to unsaved work loss or productivity disruption.