VDB
CVE-2025-64784
CVE-2025-64784
PUBLISHED
CVSS 7.099999904632568 HIGH
Adobe has released an update for the Adobe DNG Software Development Kit (SDK) for Windows and macOS. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure, or application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. Vulnerability: Heap-based Buffer Overflow (CWE-122) Impact: Memory exposure Severity: Critical CVSS: 7.1 CWE: CWE-122
EPSS 0.20% · 9.9th percentile
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS Score
0.20%
9.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Adobe DNG Software Development Kit (SDK) | 1.7.0, 1.7.0, 1.7.0 |
Timeline
- Dec 9, 2025 CVE Published
- Dec 10, 2025 EPSS Score
- Dec 14, 2025 EPSS Score
- Dec 19, 2025 EPSS Score
- Dec 23, 2025 EPSS Score
- Dec 27, 2025 EPSS Score
- Jan 1, 2026 EPSS Score
- Jan 5, 2026 EPSS Score
- Jan 9, 2026 EPSS Score
- Jan 13, 2026 EPSS Score
- Jan 18, 2026 EPSS Score
- Jan 22, 2026 EPSS Score