CVE-2020-9623

Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@adobe.com

Published

2020-06-26

Last modified

2024-08-04

Weaknesses

CWE-125

Affected products

• Adobe Dng Software Development Kit Sdk (Adobe)
• Digital Negative Software Development Kit (Adobe)

References

• https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html