CVE-2026-27280

Schreibfehler außerhalb der Grenzen in dngrendertask::ProcessArea Adobe DNG SDK / Android Erreichbar über eine gewöhnliche DNG-Datei durch Androids öffentliche Bilddecodierungs-API und reproduziert auf einem Galaxy S25 mit der eigenen/system/lib64/libdngsdk.so des Telefons. Verwundbar: DNG SDK...

CVE-2025-48622

In ProcessArea of dngmiscopcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

📄 Adobe DNG SDK 1.4 Out-Of-Bounds Read

A vulnerability exists in Adobe DNG SDK the fork used by Android due to improper validation of the fAreaSpec fields inside the dngopcodeDeltaPerRow::ProcessArea function. If an attacker supplies a crafted DNG file with an empty or malformed fAreaSpec, the SDK performs arithmetic that results in...