Vulnerability · Published Feb 23, 2025 · Assigned by VulDB
CVE-2025-1587SourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflow
Medium 5.3
In plain English
A medium-severity buffer overflow in Telecom Billing Management System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 29% of all known vulnerabilities).
Official description
A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Telecom Billing Management System | 1.0 |
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- VDB-296567 | SourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflow vdb-entry, technical-description
- VDB-296567 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #505363 | SourceCodester Telecom Billing Management System V1.0 Buffer Overflow third-party-advisory
- https://github.com/wshRE/CVE/issues/1 exploit, issue-tracking
- https://www.sourcecodester.com/ product