CVE-2020-9589

Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@adobe.com

Published

2020-06-26

Last modified

2024-08-04

Weaknesses

CWE-787

Affected products

• Adobe Dng Software Development Kit Sdk (Adobe)
• Digital Negative Software Development Kit (Adobe)

References

• https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html