CVE-2026-34616
MediumCVSS 5.5Summary
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Risk Assessment
An attacker could access sensitive data stored in memory, potentially leading to information leakage.
Recommendation
Update DNG SDK to the latest available version that includes the fix.
Original NVD description (English source)
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.