CVE-2026-21355: DNG SDK | Out-of-bounds Read (CWE-125)
DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21355?
CVE-2026-21355 is classified as a moderate severity vulnerability due to the potential for sensitive information disclosure.
How do I fix CVE-2026-21355?
To mitigate CVE-2026-21355, upgrade to a version of DNG SDK that is later than 1.7.1.
What type of vulnerability is CVE-2026-21355?
CVE-2026-21355 is an out-of-bounds read vulnerability categorized under CWE-125.
Who is affected by CVE-2026-21355?
CVE-2026-21355 affects all versions of DNG SDK up to and including 1.7.1.
What could be the consequences of exploiting CVE-2026-21355?
Exploitation of CVE-2026-21355 could lead to memory exposure, potentially disclosing sensitive data stored in memory.