CVE-2020-9590 is a heap overflow vulnerability affecting Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions, as well as related products on Microsoft Windows. This high-severity flaw (CVSS 7.8) could allow an unauthenticated attacker to achieve arbitrary code execution through user interaction, such as opening a malicious DNG file. While no public exploit code or active exploitation has been observed, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.5CPE matchmatch criteria | cpe:2.3:a:adobe:digital_negative_software_development_kit:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.