CVE-2026-48267

DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:adobe:dng_software_development_kit:*:*:*:*:*:*:*:*

History

08 Jul 2026, 19:42

Type Values Removed Values Added
First Time Adobe
Adobe dng Software Development Kit
CPE cpe:2.3:a:adobe:dng_software_development_kit:*:*:*:*:*:*:*:*
References () https://helpx.adobe.com/security/products/dng-sdk/apsb26-67.html - () https://helpx.adobe.com/security/products/dng-sdk/apsb26-67.html - Vendor Advisory

06 Jul 2026, 21:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-07-06 21:16

Updated : 2026-07-08 19:42


NVD link : CVE-2026-48267

Mitre link : CVE-2026-48267

CVE.ORG link : CVE-2026-48267


JSON object : View

Products Affected

adobe

  • dng_software_development_kit
CWE
CWE-476

NULL Pointer Dereference