Android DNG SDK Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Android DNG SDK, specifically within the image processing component. The issue arises from a missing bounds check in the 'ParseTag' function of 'dng_ifd.cpp', which can lead to a crash in the image renderer. This vulnerability can be exploited remotely, without requiring any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability causes a crash in the image renderer, leading to a denial-of-service condition.

Remediation

Users can update their devices to the April 2025 security patch level to address this vulnerability.