CVE-2025-4063code-projects Student Information Management System cancel stack-based overflow

Description

A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affected by this issue is the function cancel. The manipulation of the argument first_name/last_name leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• VDB-306500 | code-projects Student Information Management System cancel stack-based overflow vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-306500 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #559466 | Student Information Management System stack overflow in main function v1.0 Buffer Overflow third-party-advisoryThird Party AdvisoryVDB Entry
• https://github.com/zzzxc643/cve/blob/main/Student_Info_System.md exploitExploit
• https://code-projects.org/ productProduct