Product:
DNG SDK
Summary
DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this issue to cause the application to crash or become unresponsive. Exploitation requires user interaction as a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-64894 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that triggers the Integer Overflow or Wraparound condition when opened by the victim using the affected DNG SDK. The attacker then needs to convince the victim to open this file, which will lead to the application crashing or becoming unresponsive.
Affected Products
- DNG SDK versions 1.7.0 and earlier: These versions are vulnerable to an Integer Overflow or Wraparound issue that can cause denial-of-service.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of the DNG SDK that addresses this issue. Additionally, users should avoid opening files from untrusted sources to reduce the risk of exploitation.