The vulnerability lies in the key entry parsing routine of Paint Studio 2.17. Malformed input, such as a text file containing an excessively large buffer of characters, triggers a crash in the application. The crash results in a denial of service, preventing users from accessing or saving data in the affected session and mapping to CWE‑1285.

Paint Studio 2.17 from Pixarra is the specific product affected. No other versions or vendors are listed in the data. The flaw is confined to local users who can run the application on the infected machine.

The CVSS score of 6.9 indicates a moderate risk level, while the EPSS score of less than 1% suggests that exploitation is expected to be rare. The vulnerability is not listed in the CISA KEV catalog. Attacks require local execution privileges to the software, enabling an attacker to disrupt service for the user or a local environment, but not to gain remote code execution or affect other hosts.