← CVE Intelligence

CVE-2026-47964

DNG SDK | Heap-based Buffer Overflow (CWE-122) PUBLISHED

Description (CNA)

DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (CNA)

Vendor / productVersions
Adobe / Adobe DNG Software Development Kit (SDK)affected 0 through 1.7.1.2536; unaffected 1.7.1.2611

CWE

CWE-122

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.