CVE-2025-21053
MediumCVSS 4.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
Risk Assessment
Memory corruption may lead to application crashes or potential arbitrary code execution in the process context. The risk affects devices with the vulnerable library version.
Recommendation
Apply the SMR Oct-2025 Release 1 or later update containing the fix for libpadm.so.
Other vulnerabilities in libpadm.so
See all- CVE-2026-21049High
An out-of-bounds write vulnerability in the libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
- CVE-2025-21054Medium
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
- CVE-2025-21052Medium
An out-of-bounds write under specific conditions in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
- CVE-2025-21051Medium
An out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
Original NVD description (English source)
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS