BlueAuditor 1.7.2.0 contains a buffer overflow in the registration key field that can be triggered by an attacker who submits an oversized key. The overflow causes the application to crash during registration processing, resulting in a denial of service. This flaw does not allow code execution or privilege escalation; it only disrupts availability for legitimate users.

The affected product is BlueAuditor by NSauditor, specifically version 1.7.2.0. No other versions or variants are listed as vulnerable.

The CVSS score of 6.9 indicates a medium severity for a local denial of service. The risk is limited to users with local access capable of submitting registration keys. No EPSS score or KEV listing is available, so widespread exploitation has not been confirmed. Attackers require local access and the flaw does not provide code execution or privilege escalation, but it can cause significant downtime for the impacted system.