CVE-2025-64783

CWE-190 — Integer Overflow4 documents4 sources
Severity
7.8HIGH
EPSS
0.0%
top 85.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Platform External/dng SDKAdobe DNG SDKAdobe DNG Software Development KIT
Timeline
PublishedDec 9
Latest updateMar 1

Description

DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶Androidplatform/external/dng_sdk16-qpr2-next:0 — 16-qpr2-next:2026-03-01+4
▶CVEListV5adobe/dng_sdk1.7.0

🔴Vulnerability Details

3
OSV
CVE-2025-64783: In multiple locations, there is a possible way to access unexpected data due to multiple causes↗2026-03-01
▶
CVEList
DNG SDK | Integer Overflow or Wraparound (CWE-190)↗2025-12-09
▶
GHSA
GHSA-gwpg-4qv3-2qfr: DNG SDK versions 1↗2025-12-09
▶
CVE-2025-64783 (HIGH CVSS 7.8) | DNG SDK versions 1.7.0 and earlier | cvebase.io