CVE-2026-47964
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A heap-based buffer overflow vulnerability in DNG SDK versions 1.7.1 2536 and earlier allows arbitrary code execution in the context of the current user. Exploitation requires user interaction to open a malicious file.
Risk Assessment
An attacker can take control of the victim's system by executing arbitrary code with their privileges, leading to data theft or malware installation.
Recommendation
Update DNG SDK to a version later than 1.7.1 2536 immediately and instruct users not to open files from untrusted sources.
Other vulnerabilities in DNG SDK wersje 1.7.1 2536 i wcześniejsze
See all- CVE-2026-47963Medium
The vulnerability in DNG SDK versions 1.7.1 2536 and earlier is caused by an out-of-bounds read, potentially leading to disclosure of sensitive memory. An attacker could exploit this to obtain confidential information, but user interaction is required as the victim must open a malicious file.
- CVE-2026-47934Medium
The vulnerability in DNG SDK versions 1.7.1 2536 and earlier is caused by an out-of-bounds read, potentially leading to disclosure of sensitive memory. An attacker could exploit this to access confidential information, but user interaction is required as the victim must open a malicious file.
- CVE-2026-47927Medium
The vulnerability in DNG SDK versions 1.7.1 2536 and earlier is caused by an out-of-bounds read, which could lead to disclosure of sensitive memory. An attacker could exploit this to access confidential information, but user interaction is required as the victim must open a malicious file.
Original NVD description (English source)
DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.