CVE-2025-3166
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Apr 3, 2025
Updated: Apr 8, 2025
CWE ID 119
CWE ID 787
CWE ID 121
Summary
CVE-2025-3166 is a critical buffer overflow vulnerability identified in the Search Product Menu component of code-projects Product Management System 1.0. The issue arises from a flaw in the function search_item, which allows an attacker to manipulate the argument "target," resulting in stack-based buffer overflow. Local access is necessary for an attacker to exploit this vulnerability, which has already been disclosed to the public, increasing the risk of potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Code Projects