CVE-2026-48267 PUBLISHED

DNG SDK | NULL Pointer Dereference (CWE-476)

Assigner: adobe
Reserved: 21.05.2026 Published: 06.07.2026 Updated: 07.07.2026

DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS Score: 5.5

Product Status

Vendor Adobe
Product DNG SDK
Versions Default: affected
  • affected from 0 to 1.7.1 2536 (incl.)

References

Problem Types

  • NULL Pointer Dereference (CWE-476) CWE