Buffer Overflow Vulnerability in DNG SDK by Android

CVE-2025-48622

What is CVE-2025-48622?

A vulnerability exists in the DNG SDK within the ProcessArea module, specifically in the dng_misc_opcodes.cpp file. This flaw allows for a potential out-of-bounds read due to a buffer overflow, which could result in the disclosure of sensitive information on the local system. Notably, this vulnerability does not require any additional execution privileges or user interaction for exploitation, making it especially concerning for users relying on the affected SDK. Remediation measures are necessary to prevent unauthorized data access.

References