CVE-2020-9629 - Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability

Back Back to CVE browser

MEDIUM

Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability

Published Jun 26, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 2.81%

Description

Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Affected products

Vendor Adobe Product Adobe DNG Software Development Kit (SDK) Default
unknown
Affected
- Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Adobe	Adobe DNG Software Development Kit (SDK)	unknown	Affected Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30418
Advisory
https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30418		Advisory
https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published Jun 26, 2020

Updated Aug 4, 2024

Reserved Mar 2, 2020

Link CVE-2020-9629

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9629

Red Hat

No data

ENISA EUVD

Assigner adobe

Published Jun 26, 2020

Updated Aug 4, 2024

Link EUVD-2020-30418

GitHub

No data