CVE-2025-70330 describes a vulnerability in Easy Grade Pro 4.1.0.2 where the application improperly handles certain fields within .EGP gradebook files. By manipulating specific fields at exact offsets in an otherwise valid file, an attacker can cause an out-of-bounds memory read during parsing. This leads to an unhandled access violation and causes the application to crash, resulting in a denial-of-service condition localized to the user opening the file. The vulnerability is classified under CWE-125 (Out-of-bounds Read) and has a CVSS v3.1 base score of 3.3, indicating low severity. No known exploits are reported in the wild, and the attack requires local access and user interaction.

The impact is limited to a local denial-of-service condition caused by application crash due to an out-of-bounds memory read. There is no impact on confidentiality or integrity of data. Exploitation requires a user to open a specially crafted .EGP file, leading to an unhandled access violation and crash of Easy Grade Pro 4.1.0.2.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening .EGP files from untrusted or unknown sources to prevent triggering the denial-of-service condition.