CVE-2025-4059
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Apr 29, 2025
CWE ID 918
Summary
CVE-2025-4059 is a newly disclosed critical vulnerability affecting the Prison Management System 1.0, specifically the addrecord function within the Prison_Mgmt_Sys component. An attacker can exploit this stack-based buffer overflow vulnerability by manipulating the filename argument. The exploitation requires local access and the details have been made public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.