VDB
CVE-2025-64893
CVE-2025-64893
PUBLISHED
CVSS 7.099999904632568 HIGH
Adobe has released an update for the Adobe DNG Software Development Kit (SDK) for Windows and macOS. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure, or application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. Vulnerability: Out-of-bounds Read (CWE-125) Impact: Memory exposure Severity: Critical CVSS: 7.1 CWE: CWE-125
EPSS 0.18% · 6.7th percentile
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS Score
0.18%
6.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Adobe DNG Software Development Kit (SDK) | 1.7.0, 1.7.0, 1.7.0 |
Timeline
- Dec 9, 2025 CVE Published
- Dec 10, 2025 EPSS Score
- Dec 14, 2025 EPSS Score
- Dec 19, 2025 EPSS Score
- Dec 23, 2025 EPSS Score
- Dec 28, 2025 EPSS Score
- Jan 1, 2026 EPSS Score
- Jan 5, 2026 EPSS Score
- Jan 10, 2026 EPSS Score
- Jan 14, 2026 EPSS Score
- Jan 19, 2026 EPSS Score
- Jan 23, 2026 EPSS Score