Out-of-Bounds Write Vulnerability in DNG SDK by Adobe

CVE-2026-34620

What is CVE-2026-34620?

The DNG SDK, across versions 1.7.1 2502 and earlier, is susceptible to an out-of-bounds write vulnerability allowing attackers to potentially corrupt application memory. This exploitation may lead to the application crashing or becoming unresponsive. Notably, successful exploitation requires user interaction, as the victim must open a specially crafted malicious file. It is crucial for users and developers to ensure they are using the latest version of the DNG SDK to mitigate risks associated with this vulnerability.

References