high7.5
CVE-2025-22423
In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check.
Impact
In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 13.0, 14.0, 15.0 |