CVE-2026-48267
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Risk Assessment
The risk involves an attacker potentially causing application crashes, leading to service unavailability for users. User interaction is required, which limits attack automation.
Recommendation
It is recommended to immediately update DNG SDK to a version later than 1.7.1 2536 that addresses this vulnerability. Additionally, educate users not to open files from untrusted sources.
Original NVD description (English source)
DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.