Описание
DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Одновременно
Одно из
EPSS
7.1 High
CVSS3
Дефекты
Связанные уязвимости
DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Уязвимость программного средства чтения и записи файлов Adobe DNG Software Development Kit (SDK), связанная с переполнением буфера в динамической памяти, позволяющая нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации
EPSS
7.1 High
CVSS3