VULNERABILITY INTELLIGENCE

CVE-2021-21901

CVSS score9.8 CRITICAL

EPSS probability1.61%

CISA KEVNot currently listed

Published2021-12-22

Last modified2026-06-17

Description

A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to memcpy. An attacker can send a malicious packet to trigger this vulnerability.