Uderzo Software SpaceSniffer v2.0.5.18 contains a stack‑based buffer overflow that an attacker can trigger by supplying a maliciously crafted .sns snapshot file. The flaw allows the attacker to execute arbitrary code on the victim’s system, compromising confidentiality, integrity and availability of the affected machine.

Vulnerable hosts run Uderzo Software SpaceSniffer version 2.0.5.18. No other versions were reported in the advisory, and the CNA does not list additional affected releases.

The CVSS score of 7.8 indicates high severity. The EPSS score is below 1 %, and the vulnerability is not currently listed in the CISA KEV catalog, implying that exploitation is low‑probability at present. The likely attack vector involves delivering a crafted .sns file to a host that has SpaceSniffer installed; this inference is based on the description that the overflow is triggered when the application processes a snapshot file. The description does not explicitly state that a user must open the file, but it is implied that the file must be processed by the application.