CVE-2025-21052
MediumCVSS 4.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
An out-of-bounds write under specific conditions in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
Risk Assessment
A local attacker could exploit this vulnerability to cause memory corruption, potentially leading to system instability or arbitrary code execution within the process context.
Recommendation
Update the software to the version containing SMR Oct-2025 Release 1 or later to mitigate the vulnerability.
Other vulnerabilities in libpadm.so
See all- CVE-2026-21049High
An out-of-bounds write vulnerability in the libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
- CVE-2025-21054Medium
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
- CVE-2025-21053Medium
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
- CVE-2025-21051Medium
An out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
Original NVD description (English source)
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS