CVE-2025-64894

DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this issue to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

• CWE-190

• https://helpx.adobe.com/security/products/dng-sdk/apsb25-118.htmlVendor Advisory

Published

Dec 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6488The isMobile plugin for WordPress is vulnerable to Stored Cr…6.4
• CVE-2025-64881Adobe Experience Manager versions 6.5.23 and earlier are aff…5.4
• CVE-2025-64887Adobe Experience Manager versions 6.5.23 and earlier are aff…5.4
• CVE-2025-64888Adobe Experience Manager versions 6.5.23 and earlier are aff…5.4
• CVE-2025-6489A vulnerability has been found in itsourcecode Agri-Trading …9.8
• CVE-2025-64893DNG SDK versions 1.7.0 and earlier are affected by an Out-of…7.1
• CVE-2025-64896Creative Cloud Desktop versions 6.4.0.361 and earlier are af…5.5
• CVE-2025-64897ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are…5.6
• CVE-2025-64898ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are…5.3
• CVE-2025-64899Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.2…7.8
• CVE-2025-6490A vulnerability was found in sparklemotion nokogiri c29c9209…3.3
• CVE-2025-6491In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.…5.9