Product:
DNG SDK
Summary
DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation requires user interaction, as a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-27281 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that triggers the Integer Overflow or Wraparound condition. The attacker then needs to convince the victim to open this file using the affected DNG SDK version. Once the file is opened, the application may crash or become unresponsive, leading to denial-of-service.
Affected Products
- DNG SDK versions 1.7.1 2471 and earlier are vulnerable to the Integer Overflow or Wraparound issue.
Mitigation
To mitigate this vulnerability, users should avoid opening files from untrusted sources and ensure they are using the latest version of the DNG SDK. Adobe may provide patches or updates to address this issue, so checking for updates regularly is recommended.