Local OOB Write in libpadm.so JPEG Decoding (CVE-2025-21052)
CVE-2025-21052 Published on October 10, 2025
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
Vulnerability Analysis
CVE-2025-21052 is exploitable with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and no impact on availability.
Products Associated with CVE-2025-21052
stack.watch emails you whenever new vulnerabilities are published in Samsung Mobile Devices or Samsung Mobile Devices. Just hit a watch button to start following.
Affected Versions
Samsung Mobile Devices Version SMR Oct-2025 Release in Android 13, 14, 15, 16 is unaffected by CVE-2025-21052Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.