Vulnerability · Published Jan 23, 2026 · Assigned by VulnCheck

CVE-2021-47881dataSIMS Avionics ARINC 664-1 - Local Buffer Overflow

High 8.4

In plain English

A high-severity stack buffer overflow in dataSIMS Avionics ARINC from Data Device Corporation. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)8.4High

Exploit odds (30 days)0.2%top 89.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Public PoC

Official description

dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that allows attackers to overwrite memory by manipulating the milstd1553result.txt file. Attackers can craft a malicious file with carefully constructed payload and alignment sections to potentially execute arbitrary code on the Windows system.

Affected products (as reported)

Vendor	Product	Versions
Data Device Corporation	dataSIMS Avionics ARINC	4.5.3

Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

ExploitDB-49577 exploit
Vendor Homepage product
Software Product Page product
VulnCheck Advisory: dataSIMS Avionics ARINC 664-1 - Local Buffer Overflow third-party-advisory