This vulnerability is a local privilege escalation flaw in the SafeNet Authentication Client Service. It allows an authenticated user who does not have administrator rights to trigger a heap‑based buffer overflow via the service interface. If the overflow succeeds, the attacker can execute arbitrary code running with Local System privileges, effectively taking full control of the affected machine.

The issue affects Thalesgroup SafeNet Authentication Client Service versions up to and including 10.9 R3 GA (build 10.9.7449). Any deployment of these or earlier releases on Windows systems is vulnerable.

The CVSS score of 7.3 indicates a high severity. Although no EPSS value is available, the lack of a KEV designation does not diminish the risk of exploitation in environments where the vulnerable service is installed. The flaw is exploitable locally by a non‑administrator user, so mitigating the risk requires ensuring the affected version is not in circulation on privileged systems.