Adobe DNG SDK Integer Overflow Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in the Adobe DNG Software Development Kit (SDK) versions 1.7.1 build 2471 and earlier. This vulnerability arises from an integer overflow or wraparound issue, which could cause applications to crash or become unresponsive. Exploitation of this vulnerability requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability can cause the application to crash or become unresponsive.

Remediation

Users are advised to update to Adobe DNG SDK version 1.7.1 build 2502. This update is available through the Adobe Tech Note for DNG SDK.