DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/dng-sdk/apsb26-67.html | Vendor Advisory |
Configurations
History
08 Jul 2026, 19:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Adobe
Adobe dng Software Development Kit |
|
| CPE | cpe:2.3:a:adobe:dng_software_development_kit:*:*:*:*:*:*:*:* | |
| References | () https://helpx.adobe.com/security/products/dng-sdk/apsb26-67.html - Vendor Advisory |
06 Jul 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-06 21:16
Updated : 2026-07-08 19:42
NVD link : CVE-2026-48267
Mitre link : CVE-2026-48267
CVE.ORG link : CVE-2026-48267
JSON object : View
Products Affected
adobe
- dng_software_development_kit
CWE
CWE-476
NULL Pointer Dereference
