Vulnerability · Published May 9, 2025 · Assigned by VulDB
CVE-2025-4471code-projects Jewelery Store Management system Search Item View stack-based overflow
Medium 5.3
In plain English
A medium-severity stack buffer overflow in Jewelery Store Management system from code-projects. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Official description
A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0. Affected by this issue is some unknown functionality of the component Search Item View. The manipulation of the argument str2 leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Jewelery Store Management system | 1.0 |
Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- VDB-308090 | code-projects Jewelery Store Management system Search Item View stack-based overflow vdb-entry, technical-description
- VDB-308090 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #566273 | code-projects Jewelery Store Management system 0/1 Buffer Overflow third-party-advisory
- https://github.com/BinX-Lab/Store_buffer_overflow exploit
- https://code-projects.org/ product