CVE-2021-21903

CVE-2021-21903 is a critical stack-based buffer overflow vulnerability in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. An unauthenticated attacker can exploit this by sending a specially crafted UDP packet, leading to arbitrary code execution, denial of service, or full system compromise. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required. While there is no public exploit code or evidence of active exploitation, the vulnerability has garnered community discussion and media coverage, indicating awareness and potential for future exploitation.