Heap-based Buffer Overflow in DNG SDK by Adobe

CVE-2025-64784

What is CVE-2025-64784?

The DNG SDK from Adobe is susceptible to a Heap-based Buffer Overflow vulnerability, present in version 1.7.0 and prior. This vulnerability enables potential attackers to exploit the affected software by leveraging malicious files, leading to unauthorized memory exposure or application crashes. User interaction is essential for exploitation, as victims must open the harmful file for the attack to be effective. It is critical for users to stay informed and apply necessary updates to mitigate this risk.

References