The WibuKey driver for Windows versions earlier than 6.72 contains insufficient validation when calculating the size of a kernel buffer, which allows a user to supply crafted input that causes the kernel to write a small amount of data beyond the end of the intended buffer. The primary impact is a system crash; under unfavorable circumstances, the adjacent kernel memory can be modified, potentially enabling further compromise. This flaw is identified as CWE‑787.

Installations of WibuSystems WibuKey for Windows below version 6.72 are affected. The product is the WibuKey driver running on Windows platforms; any system that includes the driver prior to update 6.72 should be assessed.

The CVSS score is 7, indicating high severity. EPSS data is not available, so the likelihood of exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local or requiring elevated privileges to interact with the driver, as the vulnerability description does not explicitly state the required conditions. Successful exploitation can lead to denial of service and, in adverse cases, memory corruption that might be leveraged for privilege escalation.