CNNVD-202602-1460 Information

CNNVD ID

CNNVD-202602-1460

CVE-2026-21352

  • CNNVD Published: 2026-02-10

Description (Chinese)

Adobe DNG SDK是美国奥多比(Adobe)公司的一款提供读取和写入DNG文件功能的软件开发工具包。 Adobe DNG SDK 1.7.1 2410及之前版本存在缓冲区错误漏洞,该漏洞源于越界写入,可能导致在当前用户环境中执行任意代码。

Description (English)

Adobe DNG SDK is a software development toolkit for reading and writing DNG files from Adobe USA. Adobe DNG SDK 1.7.1 2410 and earlier versions had an error loophole in the buffer zone, which originated in cross-border writing and could lead to the enforcement of arbitrary codes in the current user environment.

Hazard Level

Medium

Vulnerability Type

缓冲区错误

Affected Vendor

奥多比

Published

2026-02-10

Last Modified

2026-02-24

References

https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html

Patch

https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html

Share on: