dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that allows attackers to overwrite memory by manipulating the milstd1…

CVE-2021-47881 is a local buffer overflow vulnerability in dataSIMS Avionics ARINC 664-1 version 4.5.3. The vulnerability allows attackers to overwrite memory by manipulating the milstd1553result.txt file. Attackers can craft malicious files with carefully constructed payload and alignment sections to potentially execute arbitrary code on Windows systems. This affects avionics software used in aviation systems, making it a critical infrastructure security concern. The vulnerability has been documented with proof-of-concept exploits available.