CVE-2025-4063

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Apr 29, 2025
Updated: May 9, 2025
CWE ID 119
CWE ID 121
CWE ID 787

Summary

CVE-2025-4063 is a critical buffer overflow vulnerability discovered in the Student Information Management System 1.0 by code-projects. This issue lies within the function 'cancel'. An attacker can exploit this vulnerability by manipulating the 'first_name/last_name' argument, resulting in stack-based buffer overflow. This vulnerability can be exploited locally and the exploit has been made public, increasing the risk of potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share