CVE-2025-64894EPSS p5.8%
CVE-2025-64894CVE-2025-64894
adobe / dng_software_development_kit
Description
DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this issue to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scoring
| CVSS | 5.5 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| EPSS | 0.17% probability of exploitation · percentile 5.8% · 2026-10-16T12:02:51Z |
| Last modified | 2026-10-14 |