A stack-based buffer overflow and out-of-bounds write vulnerability exists in Thales Sentinel Keys Server on Windows versions prior to 1.3.8.0. The vulnerability arises because the software does not validate the length of the first field in an input message. A local attacker can exploit this flaw by crafting a malicious input to achieve code execution with NT AUTHORITY\SYSTEM privileges, resulting in local privilege escalation.