SpotAuditor 3.6.7 contains a local buffer overflow in the Base64 Password Decoder component. By supplying an oversized Base64 string through the decoder interface, an attacker can cause the application to crash, leading to a denial of service condition. This vulnerability is classified as CWE-787, where a buffer overflow could corrupt memory and destabilize the process.

The affected product is SpotAuditor version 3.6.7 by Nsauditor. No other versions or vendors are listed in the CNA data for this vulnerability. The product is accessed locally, and the risk applies to instances running SpotAuditor 3.6.7 on any supported operating system.

The CVSS score of 6.9 indicates moderate impact. EPSS data is not provided and the vulnerability is not listed in the CISA KEV catalog. Attackers require local access to inject the oversized Base64 string via the decoder interface. Once triggered, the crash can reduce availability of the affected service. The lack of remote code execution does not raise the severity, but repeated crashes could be leveraged in a denial‑of‑service attack. Because the vector is local, it is most relevant to users who run SpotAuditor on potentially privileged systems.