VDB
CVE-2025-64783
CVE-2025-64783
PUBLISHED
CVSS 7.800000190734863 HIGH
Adobe has released an update for the Adobe DNG Software Development Kit (SDK) for Windows and macOS. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure, or application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. Vulnerability: Integer Overflow or Wraparound (CWE-190) Impact: Arbitrary Code Execution Severity: Critical CVSS: 7.8 CWE: CWE-190
EPSS 0.21% · 9.5th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.21%
9.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Adobe DNG Software Development Kit (SDK) | 1.7.0, 1.7.0, 1.7.0 |
Timeline
- Dec 9, 2025 CVE Published
- Dec 10, 2025 EPSS Score
- Dec 14, 2025 EPSS Score
- Dec 19, 2025 EPSS Score
- Dec 23, 2025 EPSS Score
- Dec 28, 2025 EPSS Score
- Jan 1, 2026 EPSS Score
- Jan 6, 2026 EPSS Score
- Jan 10, 2026 EPSS Score
- Jan 15, 2026 EPSS Score
- Jan 19, 2026 EPSS Score
- Jan 23, 2026 EPSS Score