CVE-2020-9589

published 2020-06-26

CVE-2020-9589: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
adobe	adobe_dng_software_development_kit	—	—
adobe	digital_negative_software_development_kit	<= 1.5	—
google	android	—	—
platform	external_dng_sdk	>= 10:0 < 10:2020-07-01	10:2020-07-01
platform	external_dng_sdk	>= 8.0:0 < 8.0:2020-07-01	8.0:2020-07-01
platform	external_dng_sdk	>= 8.1:0 < 8.1:2020-07-01	8.1:2020-07-01
platform	external_dng_sdk	>= 9:0 < 9:2020-07-01	9:2020-07-01

CWE-787