Adobe DNG Software Development Kit
Moderate fix1 remedy
cpe:2.3:a:adobe:dng_software_development_kit:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 1.7.1 build 2410
Adobe DNG SDK Integer Overflow Vulnerability Leading to Arbitrary Code Execution
Vulnerability
Patched
An integer overflow vulnerability has been identified in the Adobe DNG Software Development Kit (SDK) versions 1.7.1 build 2410 and earlier. This vulnerability could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.
Impact
Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.
Remediation
Users are advised to update to Adobe DNG SDK version 1.7.2 build 2410.
Added: Feb 10, 2026, 9:17 PM
Updated: Feb 10, 2026, 11:00 PM
Vulnerability Rating
Custom Algorithm
spread
2.4impact
10.0exploitability
3.6remediation
7.7relevance
2.9threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.