CVE-2026-21353
Analyzed Analyzed - Analysis Complete
Integer Overflow in Adobe DNG SDK Allows Code Execution

Publication date: 2026-02-10

Last updated on: 2026-02-13

Assigner: Adobe Systems Incorporated

Description
DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-10
Last Modified
2026-02-13
Generated
2026-06-16
AI Q&A
2026-02-10
EPSS Evaluated
2026-06-15
NVD
CVE-2026-21353
EUVD
EUVD-2026-6738
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
adobe dng_software_development_kit to 1.7.2 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-190 The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability affects DNG SDK versions 1.7.1 2410 and earlier. It is an Integer Overflow or Wraparound issue that can lead to arbitrary code execution within the context of the current user.

To exploit this vulnerability, an attacker needs the victim to open a specially crafted malicious file, which triggers the overflow and allows execution of malicious code.

Impact Analysis

If exploited, this vulnerability can allow an attacker to execute arbitrary code with the privileges of the current user. This could lead to unauthorized actions such as data theft, system modification, or further compromise of the affected system.

However, exploitation requires user interaction, specifically opening a malicious file, which means social engineering or tricking the user is necessary.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21353. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart