CVE-2025-64784

Published: Dec 9, 2025Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: psirt@adobe.com (Secondary)

Description

DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (1)

Products: Adobe: Dng Software Development Kit

1 product

Dng Software Development Kit

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Dng Software Development Kit	Up to 1.7.0

Running on/with	Platform Versions
Apple Macos	All versions
Microsoft Windows	All versions

Related CWEs

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

https://helpx.adobe.com/security/products/dng-sdk/apsb25-118.html

Source: psirt@adobe.com

Vendor Advisory

Timeline

No history available yet.