CVE-2020-9627 Information disclosure in Adobe DNG Software Development Kit (SDK)

What is CVE-2020-9627?

CVE-2020-9627 is a high-severity vulnerability in Adobe DNG Software Development Kit (SDK), published on 26 Jun 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Weakness: CWE-125

Which versions are affected by CVE-2020-9627?

It affects 1 product.

Products include Adobe Dng Software Development Kit.

How do I fix CVE-2020-9627?

No fix has been published for CVE-2020-9627 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-9627 being exploited?

There is no known exploitation of CVE-2020-9627 in the wild and no public exploit code.

Other vulnerabilities in Adobe DNG Software Development Kit (SDK)

• CVE-2016-4167 Memory corruption in n/a Critical 9.8
• CVE-2026-48389 DNG SDK | Stack-based Buffer Overflow (CWE-121) High 7.8
• CVE-2026-47964 DNG SDK | Heap-based Buffer Overflow (CWE-122) High 7.8
• CVE-2026-27280 DNG SDK | Out-of-bounds Write (CWE-787) High 7.8
• CVE-2026-21352 DNG SDK | Out-of-bounds Write (CWE-787) High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7898-gp2f-5chr.