CVE-2025-4471: code-projects Jewelery Store Management system Search Item View stack-based overflow
Description
A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0. Affected by this issue is some unknown functionality of the component Search Item View. The manipulation of the argument str2 leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Eine kritische Schwachstelle wurde in code-projects Jewelery Store Management system 1.0 entdeckt. Davon betroffen ist unbekannter Code der Komponente Search Item View. Mit der Manipulation des Arguments str2 mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff muss lokal passieren. Der Exploit steht zur öffentlichen Verfügung.
Classification
CVE ID: CVE-2025-4471
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.8
CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected Products
Vendor: code-projects
Product: Jewelery Store Management system
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.02% (probability of being exploited)
EPSS Percentile: 2.19% (scored less or equal to compared to others)
EPSS Date: 2025-06-07 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-4471https://vuldb.com/?id.308090
https://vuldb.com/?ctiid.308090
https://vuldb.com/?submit.566273
https://github.com/BinX-Lab/Store_buffer_overflow
https://code-projects.org/