PT-2025-50134 · Adobe · Dng Sdk

Published 2025-12-09 · Updated 2025-12-10 · CVE-2025-64894

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.0 and earlier

Description The DNG SDK is affected by an Integer Overflow or Wraparound issue that may result in application denial-of-service. An attacker could exploit this to cause the application to crash or become unresponsive. User interaction is required, specifically a victim must open a malicious file for exploitation to occur.

Recommendations Update to a newer version of DNG SDK than 1.7.0.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2025-15992

CVE-2025-64894

Affected Products

Dng Sdk

References · 5

• https://osv.dev/vulnerability/CVE-2025-64894 · Vendor Advisory
• https://helpx.adobe.com/security/products/dng-sdk/apsb25-118.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15992 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-64894 · Security Note
• https://twitter.com/CVEnew/status/1998781386128253189 · Twitter Post