CVE-2025-4068

CVE-2025-4068 is a critical stack-based buffer overflow vulnerability found in the changeprize function of code-projects Simple Movie Ticket Booking System version 1.0. This flaw allows an authenticated local attacker to manipulate the 'prize' argument, potentially leading to arbitrary code execution or denial of service. With a CVSS score of 7.8 (HIGH), the vulnerability requires local access and low privileges, but its impact includes high confidentiality, integrity, and availability compromise. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation, nor are there readily available Metasploit or Nuclei modules, and community discussion remains minimal.