Product:
DNG SDK
Summary
DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-21354 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that triggers the Integer Overflow or Wraparound condition. The victim must then open this file using the affected DNG SDK version, leading to a crash or unresponsive state of the application. This requires the attacker to convince the victim to open the file, making user interaction a necessary step in the exploitation process.
Affected Products
- DNG SDK versions 1.7.1 2410 and earlier: These versions are vulnerable to an Integer Overflow or Wraparound issue that can lead to application crashes.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of the DNG SDK that addresses this issue. Additionally, users should avoid opening files from untrusted sources to reduce the risk of exploitation.