Unrated severityNVD Advisory· Published Dec 9, 2025· Updated Dec 9, 2025
DNG SDK | Heap-based Buffer Overflow (CWE-122)
CVE-2025-64784
Description
DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
2- Range: <=1.7.0
- Adobe/DNG SDKv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- helpx.adobe.com/security/products/dng-sdk/apsb25-118.htmlmitrevendor-advisory
News mentions
0No linked articles in our index yet.