Out-of-Bounds Read Vulnerability in Adobe DNG Software Development Kit

CVE-2020-9624

What is CVE-2020-9624?

The Adobe DNG Software Development Kit (SDK) versions 1.5 and earlier are vulnerable to an out-of-bounds read, which can potentially allow attackers to access sensitive information. This vulnerability can be exploited if the attacker is able to manipulate the software in a way that leads the application to process unexpected memory, resulting in unintended information disclosure. Developers using affected versions should review Adobe's security advisories and apply necessary patches to safeguard against exploitation.

References