NULL Pointer Dereference in DNG SDK by Adobe

CVE-2026-48267

What is CVE-2026-48267?

The DNG SDK versions 1.7.1 2536 and earlier are susceptible to a NULL Pointer Dereference vulnerability, which could potentially lead to a denial-of-service situation. This issue could be exploited by an attacker if a user interacts with a compromised file, resulting in the application crashing and becoming inaccessible. It's important for users of the DNG SDK to be aware of this vulnerability and to take preventative measures.

References