The vulnerability is a buffer overflow that causes a denial of service by crashing the application when an attacker creates a note containing an excessively long string. By replicating a payload of 350,000 characters and inserting it twice, the application crashes, disrupting availability for all users.

My Notes Safe version 5.3 installed on any platform where the application runs. The impacted vendor is My Notes Safe by my-notes-safe, as recorded by the CNA. No specific operating system or platform is listed, so all supported environments for My Notes Safe 5.3 are potentially affected.

The CVSS score of 8.7 indicates a high severity denial of service. EPSS information is not available, so the exploit probability cannot be quantified. It is not listed in CISA KEV. Attackers can trigger the crash by submitting a single new note with duplicated large payloads, and based on the description the attack vector is inferred to be local or remote depending on the system’s access controls. A successful exploit would interrupt service for all users but does not compromise confidentiality or integrity.