Technical impact
Liquid Studio 2.17 contains a flaw that allows a local user to crash the application by entering malformed characters via the keyboard. The input is not properly validated, leading to an unexpected termination or freeze of the process. The weakness is a classic input validation issue (CWE‑606), presenting a moderate severity denial‑of‑service scenario. When exploited, the affected system will experience loss of availability for the application, potentially disrupting workflows that rely on it.
Affected Systems
The vulnerability is specific to Pixarra’s Liquid Studio version 2.17. The description and CPE string confirm that only this version is affected, with no other version information supplied. It is therefore important to identify installations of this exact release.
Risk and Exploitability
The CVSS score of 6.9 indicates a moderate impact. The EPSS score of less than 1% suggests that current exploitation is unlikely, and the issue is not listed in the KEV catalog. The attack vector is local, requiring that an attacker have access to the machine and be able to interact with the application’s keyboard interface. Without privileged or remote access, the likelihood of widespread exploitation remains low, though the availability impact is still significant for affected users.
