Back

CVE-2016-7856

CRITICAL

Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Published: Dec 15, 2016 Modified: Jun 17, 2026
CWE-119

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (1)

Vendor Product Version
adobe dng_converter *

GitHub Security Advisory GHSA-4r6g-pqff-6vpv

Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability....

References (4)

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 4.18%

Top 10% most likely to be exploited

Threat Score 40.5 / 100

Data Sources

NVD EPSS GitHub