CVE-2020-9620

—

CVSS 3.1

7.8 high

EPSS

8%p94

Published

Jun 26, 2020 (Jun 26, 2020)

Modified

Jun 17, 2026

Description

Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe
Products: digital negative software development kit
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.7%)

In the news2 stories

Threat Source newsletter for May 14, 2020

Cisco TalosMay 14, 18:00 UTC · May 14, 2020Ransomware CVE-2020-9589 CVE-2020-9590 CVE-2020-9620+1 CVEs

Adobe addresses critical issues in Acrobat, Reader, and DNG SDK

Security AffairsMay 12, 16:41 UTC · May 12, 2020Vulnerability CVE-2020-9610 CVE-2020-9612 CVE-2020-9615+11 CVEs