PT-2025-50131 · Adobe · Dng Sdk

Published 2025-12-09 · Updated 2026-03-01 · CVE-2025-64783

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.0 and earlier

Description The DNG SDK is affected by an Integer Overflow or Wraparound issue. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User interaction is required, specifically opening a malicious file, for exploitation to occur.

Recommendations Update to a version of DNG SDK later than 1.7.0.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ASB-A-483074175

BDU:2025-15998

CVE-2025-64783

Affected Products

Dng Sdk

References · 8

• https://helpx.adobe.com/security/products/dng-sdk/apsb25-118.html · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-483074175 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15998 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-64783 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64783 · Vendor Advisory
• https://twitter.com/CVEnew/status/1998781388133167243 · Twitter Post
• https://android.googlesource.com/platform/external/dng_sdk/+/6b5cf2a88ebd2b099e56d0d4717e962772ff9067 · Note
• https://source.android.com/security/bulletin/2026-03-01 · Note