Description
Adobe DNG中存在越界读取漏洞，该漏洞是由于应用对DNG文件中的JPEG内容处理不当导致的。
Adobe DNG Software Development Kit DecodeImage越界读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html
https://project-zero.issues.chromium.org/issues/42451110
https://www.snort.org/advisories/talos-rules-2024-07-03
https://nvd.nist.gov/vuln/detail/CVE-2020-9622
https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-vulnerabilities-in-acrobat-reader-and-dng-sdk/
https://avd.aliyun.com/detail?id=AVD-2020-9623
https://www.cnvd.org.cn/flaw/show/CNVD-2020-38193
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:STC:IMG:ADOBE-DNG-SDK-OOBR.html