CVE-2025-1587

MEDIUM

Razormist Telecom Billing Management System - Memory Corruption

Title source: rule
STIX 2.1

Description

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.296567
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.296567
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.505363
Exploit, Issue Tracking, Third Party Advisory exploit issue-tracking
https://github.com/wshRE/CVE/issues/1

Scores

CVSS v3 5.3
EPSS 0.0003
EPSS Percentile 8.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-120
Status published
Products (1)
razormist/telecom_billing_management_system 1.0
Published Feb 23, 2025
Tracked Since Feb 18, 2026