158 matches found
CVE-2026-27280
dngrendertask::ProcessArea 中的越界写入(Adobe DNG SDK / Android) 可通过 Android 的公共图像解码 API 从普通 DNG 文件触发,并已在 Galaxy S25 上使用手机自带的 /system/lib64/libdngsdk.so 复现。 受影响版本:DNG SDK 1.7.1 构建 2410 / 2471 (测试设备出厂搭载的是 2410) 修复版本:构建 2502 (DNGREQUIREsrcArea.Size == dstArea.Size + srcArea 索引) 设备:SM-S931B,Android 16,安全补...
Exploit for Out-of-bounds Write in Adobe Dng_Software_Development_Kit
Out-of-bounds write in dngrendertask::ProcessArea Adobe D...
CVE-2026-34620
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...
CVE-2026-34616
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must...
CVE-2026-34616 DNG SDK | Out-of-bounds Read (CWE-125)
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must...
CVE-2026-34620 DNG SDK | Out-of-bounds Write (CWE-787)
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...
EUVD-2026-67215
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...
EUVD-2026-67216
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must...
CVE-2026-34616
CVE-2026-34616 affects Adobe DNG SDK versions 1.7.1 2502 and earlier , containing an out-of-bounds read (CWE-125) that can lead to sensitive memory exposure . Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 score is 5.5 (MEDIUM) , with local attack vecto...
CVE-2026-34620
DNG SDK versions 1.7.1 2502 and earlier are vulnerable to an out-of-bounds write (CWE-787) that can corrupt memory, leading to application crash or unresponsiveness (denial-of-service). Exploitation requires local user interaction —a victim must open a malicious file. The CNA-assigned CVSS 3.1 sc...
CVE-2026-34620 DNG SDK | Out-of-bounds Write (CWE-787)
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...
CVE-2026-34616 DNG SDK | Out-of-bounds Read (CWE-125)
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must...
PT-2026-82657
Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2502 and earlier Description An out-of-bounds write issue exists where memory corruption can occur, potentially leading to a denial-of-service state where the application crashes or becomes unresponsive. This occurs when...
CVE-2026-34620: Out-of-bounds Write
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...
PT-2026-82656
Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2502 and earlier Description An out-of-bounds read issue exists where the software reads data outside the intended boundary of a buffer, potentially leading to memory exposure. This allows an attacker to disclose sensiti...
CVE-2026-34616: Out-of-bounds Read
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must...
Exploit for Uncontrolled Resource Consumption in Google Android
CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable a...
CVE-2026-48389
DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-48389
DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-48389 DNG SDK | Stack-based Buffer Overflow (CWE-121)
DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...