CVE-2026-18909 Details

A stack-based buffer overflow vulnerability has been identified in ELAN Microelectronics Corp. ELAN Smart-Pad devices running Windows, specifically within the drivers ETD.sys and ETDSMBus.sys. The vulnerability arises during Intel SMBus recovery, where ETDSMBus.sys fails to properly validate the upper limit of the hardware-derived report count. This oversight allows an out-of-range value to be passed to ETD.sys, where it is improperly used as a loop counter for copying data into a stack buffer without checking the destination size. A local attacker with standard user privileges can exploit this vulnerability, causing a kernel bugcheck that leads to a Blue Screen of Death (BSOD) with the error code 0xF7 DRIVER_OVERRAN_STACK_BUFFER, thereby creating a denial-of-service condition.