Easy Grade Pro 4.1.0.2 contains a flaw in the parsing of proprietary .EGP gradebook files. By inserting crafted data at specific offsets, an attacker can trigger an out‑of‑bounds read during parsing, resulting in an unhandled access violation and application crash. This flaw is a buffer read after the end of the allocated memory (CWE‑125) and can cause a local denial‑of‑service condition for the user who opens the compromised file.

The affected product is Easy Grade Pro version 4.1.0.2. No other vendors, products, or versions are listed as impacted.

The CVSS score is 3.3, indicating low overall severity. The EPSS score is reported as less than 1%, suggesting a low probability of exploitation. It is not listed in the CISA KEV catalog. The attack requires a local user to open a malicious .EGP file, so exploitation is limited to environments where users have the possibility to execute benign software. The flaw only leads to denial of service and does not provide a remote code execution or privilege escalation path.