CVE-2026-18909

Name of the Vulnerable Software and Affected Versions ELAN Smart-Pad versions prior to ETD24.21.52.3

Description A stack-based buffer overflow occurs in the ETD.sys and ETDSMBus.sys drivers. During Intel SMBus recovery, ETDSMBus.sys fails to enforce an upper-bound check on the hardware-derived report count. This allows an out-of-range value to be passed to ETD.sys, where it is used as a loop counter for a stack buffer copy without validating the destination size. A local attacker with standard user privileges can exploit this to trigger a kernel bugcheck (BSOD 0xF7 DRIVER OVERRAN STACK BUFFER), leading to a denial of service.

Recommendations Update ELAN Smart-Pad to a version newer than ETD24.21.52.3.