CVE-2020-9621
First published: Fri Jun 26 2020(Updated: )
Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Digital Negative Software Development Kit | <=1.5 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for Adobe DNG Software Development Kit?
The vulnerability ID for Adobe DNG Software Development Kit is CVE-2020-9621.
What is the severity of CVE-2020-9621?
The severity of CVE-2020-9621 is critical with a severity value of 7.8.
What is affected by CVE-2020-9621?
Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions are affected by CVE-2020-9621.
What is the potential impact of CVE-2020-9621?
Successful exploitation of CVE-2020-9621 can lead to arbitrary code execution.
Is Microsoft Windows vulnerable to CVE-2020-9621?
No, Microsoft Windows is not vulnerable to CVE-2020-9621.
How can I fix CVE-2020-9621?
It is recommended to update Adobe DNG Software Development Kit (SDK) to version 1.6 or later to mitigate the vulnerability.
- collector/nvd-index
- vendor/adobe
- canonical/adobe digital negative software development kit
- version/adobe digital negative software development kit/1.5
- vendor/microsoft
- canonical/microsoft windows