Buffer overflow in Adobe Dng Sdk

CVE-2025-64784

DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (9.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2025-64784?
CVE-2025-64784 is a high-severity vulnerability in Adobe Dng Sdk, classified under Heap-based Buffer Overflow. CVSS score: 7.1/10. Published 2025-12-09.
How severe is CVE-2025-64784?
High severity. CVSS v3 base score is 7.1 out of 10.