Volerion logoVolerion
Volerion logoVolerion

Adobe DNG SDK Integer Overflow Vulnerability Leading to Arbitrary Code Execution

Vulnerability

An integer overflow vulnerability has been identified in the Adobe DNG Software Development Kit (SDK) for Windows and macOS, affecting versions through 1.7.0. This vulnerability could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users are advised to update to Adobe DNG SDK version 1.7.1 build 2140. This update is available through the Adobe DNG SDK Tech Note.

Added: Dec 9, 2025, 10:20 PM
Updated: Dec 9, 2025, 10:20 PM

Vulnerability Rating

Custom Algorithm
spread
2.4
impact
7.5
exploitability
4.4
remediation
7.7
relevance
1.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.