Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-21901 EUVD-2021-9072GHSA-6m5j-hmv8-95g6

A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0.…

Published Dec 22, 2021 · Updated Aug 3, 2024 · Assigned by talos

Description

A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to memcpy. An attacker can send a malicious packet to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Garrett Metal Detectors Garrett Metal Detectors iC Module CMA Version 5.0 —

References