VDB
CVE-2025-64784
CVE-2025-64784
PUBLISHED
CVSS 7.099999904632568 HIGH
Adobe has released an update for the Adobe DNG Software Development Kit (SDK) for Windows and macOS. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure, or application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. Vulnerability: Heap-based Buffer Overflow (CWE-122) Impact: Memory exposure Severity: Critical CVSS: 7.1 CWE: CWE-122
EPSS 0.20% · 9.7th percentile
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS Score
0.20%
9.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Adobe DNG Software Development Kit (SDK) | 1.7.0 |
Timeline
- Dec 9, 2025 CVE Published
- Dec 10, 2025 EPSS Score
- Dec 15, 2025 EPSS Score
- Dec 19, 2025 EPSS Score
- Dec 24, 2025 EPSS Score
- Dec 28, 2025 EPSS Score
- Jan 2, 2026 EPSS Score
- Jan 7, 2026 EPSS Score
- Jan 11, 2026 EPSS Score
- Jan 16, 2026 EPSS Score
- Jan 20, 2026 EPSS Score
- Jan 25, 2026 EPSS Score