The vulnerability CVE-2026-18909 involves a stack-based buffer overflow in ELAN Smart-Pad drivers ETD.sys and ETDSMBus.sys on Windows. During Intel SMBus recovery, ETDSMBus.sys does not validate the upper bound of a hardware-derived report count, forwarding an out-of-range value to ETD.sys. ETD.sys uses this value as a loop counter for copying data to a stack buffer without validating the destination buffer size, leading to a potential stack buffer overflow. A local attacker with standard privileges can exploit this to cause a kernel bugcheck (BSOD 0xF7 DRIVER_OVERRAN_STACK_BUFFER), resulting in denial of service. The affected versions include all versions up to and including 24.21.52.3. There is no vendor advisory or patch information available at this time.

This vulnerability allows a local attacker with standard user privileges to cause a denial of service by triggering a kernel crash (blue screen of death) due to a stack buffer overflow in the ELAN Smart-Pad driver. There is no indication of privilege escalation or remote exploitation. The impact is limited to denial of service on affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local user access to trusted users only to mitigate risk. No official fix or workaround has been published by the vendor as of now.