CVE-2020-9629

Adobe DNG SDK (1.5 and earlier) is affected by an out-of-bounds read vulnerability (CVE-2020-9629) that could lead to information disclosure. A patch is to upgrade to SDK 1.5.1 (per Threatpost and APSB20-26). Other sources corroborate the impact and mitigation.