CNNVD-202512-1149 Information
Dec 09, 2025
cve
CNNVD ID
CNNVD-202512-1149
Related CVE
- CNNVD Published: 2025-12-09
Description (Chinese)
Adobe DNG SDK是美国奥多比（Adobe）公司的一款提供读取和写入DNG文件功能的软件开发工具包。 Adobe DNG SDK 1.7.0及之前版本存在输入验证错误漏洞，该漏洞源于整数溢出或环绕错误，可能导致执行任意代码。
Description (English)
Adobe DNG SDK is a software development toolkit for reading and writing DNG files from Adobe USA. Adobe DNG SDK 1.7.0 and previous versions had input-validation bugs, which originated in integer spills or around error, which could lead to the execution of any code.
Hazard Level
Medium
Vulnerability Type
输入验证错误
Affected Vendor
奥多比
Published
2025-12-09
Last Modified
2026-02-24
References
https://helpx.adobe.com/security/products/dng-sdk/apsb25-118.html
Patch
https://helpx.adobe.com/security/products/dng-sdk/apsb25-118.html
Share on: