VDB
CVE-2025-64893
CVE-2025-64893
PUBLISHED
CVSS 7.099999904632568 HIGH
Adobe has released an update for the Adobe DNG Software Development Kit (SDK) for Windows and macOS. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure, or application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. Vulnerability: Out-of-bounds Read (CWE-125) Impact: Memory exposure Severity: Critical CVSS: 7.1 CWE: CWE-125
EPSS 0.18% · 7.2th percentile
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS Score
0.18%
7.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Adobe DNG Software Development Kit (SDK) | 1.7.0 |
Timeline
- Dec 9, 2025 CVE Published
- Dec 10, 2025 EPSS Score
- Dec 14, 2025 EPSS Score
- Dec 18, 2025 EPSS Score
- Dec 23, 2025 EPSS Score
- Dec 27, 2025 EPSS Score
- Dec 31, 2025 EPSS Score
- Jan 4, 2026 EPSS Score
- Jan 8, 2026 EPSS Score
- Jan 13, 2026 EPSS Score
- Jan 17, 2026 EPSS Score
- Jan 21, 2026 EPSS Score