EUVD-2026-37133

DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-64894

The CVE-2025-64894 issue affects Adobe DNG SDK versions 1.7.0 and earlier. The root cause is an Integer Overflow or Wraparound in a component of the SDK, which could lead to a denial-of-service (the application crashing or becoming unresponsive). Exploitation requires user interaction: a victim m...