PT-2026-7431 · Adobe · Dng Sdk

Jann Horn · Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-21355

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2410 and earlier

Description DNG SDK versions 1.7.1 2410 and earlier contain an out-of-bounds read issue that may result in memory exposure. An attacker could potentially use this to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction, specifically that a user opens a malicious file.

Recommendations Versions prior to 1.7.1 2410 should be updated.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-01889

CVE-2026-21355

Affected Products

Dng Sdk

References · 5

• https://osv.dev/vulnerability/CVE-2026-21355 · Vendor Advisory
• https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01889 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-21355 · Security Note
• https://t.me/CVEtracker/44325 · Telegram Post