CVE-2025-3139

CVE-2025-3139 is a critical buffer overflow vulnerability affecting the Login function within the Login Form component of code-projects Bus Reservation System 1.0. This flaw, stemming from manipulation of the Str1 argument, allows for local attacks on the host. The vulnerability carries a high CVSS score of 7.8, indicating significant potential impact with high confidentiality, integrity, and availability compromise. Its attack vector is local with low attack complexity, making it relatively easy to exploit once local access is gained. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation, no Metasploit or Nuclei modules, and no entries in ExploitDB. Community discussion and media coverage are minimal, suggesting low public awareness despite the disclosed exploit.