The vulnerability is a denial‑of‑service flaw in Pixarra Blob Studio 2.17. A malicious user can exploit malformed input offered through the key entry mechanism to crash the application. Local attackers can create a text file containing a large payload of repeated characters and trigger the application to read it, leading to an unresponsive or crashed instance. This weakens availability and can disrupt user productivity. The weakness aligns with CWE‑1285, which documents DoS via large input buffers.

Affected systems are installations of Pixarra Blob Studio version 2.17 on any operating system that allows local users to launch and interact with the program. No patch or fixed version is listed in the data, and no workaround is supplied. Attackers must have local access or be able to supply the key entry input file.

The CVSS base score of 6.9 indicates high severity for a local denial‑of‑service. The EPSS score below 1% suggests a low probability of current exploitation. The vulnerability is not listed in CISA’s KEV catalog, implying no known widespread exploit. Because the exploit requires local input, it is mainly a threat in shared workstations or environments where untrusted users may run the application. Employing the vendor’s update or restricting local use mitigates the risk.