CVE-2026-21354
Analyzed Analyzed - Analysis Complete
Integer Overflow in Adobe DNG SDK Causes Denial of Service

Publication date: 2026-02-10

Last updated on: 2026-02-13

Assigner: Adobe Systems Incorporated

Description
DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-10
Last Modified
2026-02-13
Generated
2026-06-16
AI Q&A
2026-02-10
EPSS Evaluated
2026-06-15
NVD
CVE-2026-21354
EUVD
EUVD-2026-6760
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
adobe dng_software_development_kit to 1.7.2 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-190 The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Executive Summary

This vulnerability exists in DNG SDK versions 1.7.1 2410 and earlier, where an Integer Overflow or Wraparound can occur. This flaw could cause the affected application to crash or become unresponsive if exploited.

Exploitation requires user interaction, meaning a victim must open a specially crafted malicious file to trigger the issue.

Impact Analysis

The primary impact of this vulnerability is a denial-of-service condition where the application using the affected DNG SDK could crash or become unresponsive.

This could disrupt normal operations or workflows that rely on the application, potentially causing downtime or loss of productivity.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21354. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart