CVE-2026-21049
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
An out-of-bounds write vulnerability in the libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
Risk Assessment
A local attacker can exploit this vulnerability to escalate privileges and gain control over the device, leading to compromise of data confidentiality, integrity, and availability.
Recommendation
Immediately update the libpadm.so library to version SMR Jul-2026 Release 1 or later to remediate the vulnerability.
Other vulnerabilities in libpadm.so
See all- CVE-2025-21054Medium
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
- CVE-2025-21053Medium
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
- CVE-2025-21052Medium
An out-of-bounds write under specific conditions in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
- CVE-2025-21051Medium
An out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
Original NVD description (English source)
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS