CVE-2025-4038
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 28, 2025
Updated: May 10, 2025
CWE ID 119
CWE ID 121
CWE ID 787
Summary
CVE-2025-4038 is a critical vulnerability affecting the Train Ticket Reservation System 1.0. The issue lies in the Reservation function of the Ticket Reservation component, which is susceptible to stack-based buffer overflow due to improper handling of the Name argument. This local vulnerability has been publicly disclosed, and attackers can potentially exploit it to cause unintended program behavior or execute malicious code. The system is at risk until a patch is applied.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.