CVE-2017-11295

9.8 criticalEPSS 5.9%

Critical (9.8) in adobe dng converter. EPSS 5.9% chance of exploitation in the next 30 days.

An issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.9% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:dng_converter

References

http://www.securityfocus.com/bid/101828
https://helpx.adobe.com/security/products/dng-converter/apsb17-37.html
http://www.securityfocus.com/bid/101828
https://helpx.adobe.com/security/products/dng-converter/apsb17-37.html

Check your stack JSON