CVE-2025-21054
MediumCVSS 4.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
Risk Assessment
A local attacker could read data outside the allowed memory range, potentially leading to information disclosure or application crash.
Recommendation
Apply the SMR Oct-2025 Release 1 update or later.
Other vulnerabilities in libpadm.so
See all- CVE-2026-21049High
An out-of-bounds write vulnerability in the libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
- CVE-2025-21053Medium
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
- CVE-2025-21052Medium
An out-of-bounds write under specific conditions in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
- CVE-2025-21051Medium
An out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
Original NVD description (English source)
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS