Skip to content
OpenAdvisories
High · 8.4 Public exploit CVE-2021-47881 EUVD-2026-4288GHSA-f869-2w7m-q4p9

dataSIMS Avionics ARINC 664-1 - Local Buffer Overflow

Published Jan 23, 2026 · Updated Jan 23, 2026 · Assigned by VulnCheck

Description

dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that allows attackers to overwrite memory by manipulating the milstd1553result.txt file. Attackers can craft a malicious file with carefully constructed payload and alignment sections to potentially execute arbitrary code on the Windows system.

Affected products

VendorProductAffectedFixed
Data Device dataSIMS Avionics ARINC 4.5.3 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • kagancapar/CVE-2021-47881 ★ 0 · Aug 10, 2026

    CVE-2021-47881: Local stack buffer overflow in dataSIMS Avionics ARINC 664-1 v4.5.3 (CWE-121)

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References