Luminance Studio 2.17 suffers a denial‑of‑service condition that is triggered by malformed input entered through the keyboard interface. The flaw originates from improper handling of arbitrary character sequences, described as CWE‑641, and results in the application becoming unresponsive or terminating. Local attackers can use this to interrupt normal service.

The affected product is Pixarra Luminance Studio version 2.17. Only users running this exact version on local machines are at risk, as the vulnerability requires local input.

The CVSS score of 6.9 indicates moderate severity, while an EPSS score below 1% and its absence from the KEV catalog imply that exploitation is unlikely in the wild. However, the attack vector is local, so any user with access to the machine can trigger the crash. The impact is an interruption of service, which can affect productivity in environments where the application is critical.