New Project Zero issue:

Adobe DNG SDK: out-of-bounds write in dng_render_task::ProcessArea due to coordinate system confusion

https://project-zero.issues.chromium.org/issues/479111319

CVE-2026-27280

New Project Zero issue:

Adobe DNG SDK: integer overflow in dng_pixel_buffer::OptimizeOrder leads to out-of-bounds memory access

https://project-zero.issues.chromium.org/issues/478212931

CVE-2026-27281

New Project Zero issue:

Windows: OSK Shared Session Key EoP

https://project-zero.issues.chromium.org/issues/466303419

CVE-2026-24291

New Project Zero issue:

Windows: ATBroker CopySettingsToLockedDesktop Information Disclosure

https://project-zero.issues.chromium.org/issues/466301558

CVE-2026-25186

New Project Zero issue:

Windows: WinLogon WlAccessabilitypDeleteSATKey Registry Deletion EoP

https://project-zero.issues.chromium.org/issues/466300525

CVE-2026-25187

New Project Zero issue:

vpu driver allocation and free of dmabuf and iova can race causing UAF read

https://project-zero.issues.chromium.org/issues/465824679

CVE-2026-0121

New Project Zero issue:

vpu driver open and close instance ioctls race causing UAF

https://project-zero.issues.chromium.org/issues/463672550

CVE-2026-0112

New Project Zero issue:

vpu driver mmap allows OOB physical mappings

https://project-zero.issues.chromium.org/issues/463438263

CVE-2026-0106

New Project Zero issue:

Adobe DNG SDK: integer overflow in dng_ref_counted_block::Allocate leads to memory corruption on 32-bit platforms

https://project-zero.issues.chromium.org/issues/467941645

CVE-2026-21353

New Project Zero issue:

Adobe DNG SDK: missing allocation check leads to an arbitrary memory write in JXL format processing

https://project-zero.issues.chromium.org/issues/464250765

CVE-2026-21352

New Project Zero issue:

Adobe DNG SDK: multiple integer arithmetic issues in embedded JXL image support

https://project-zero.issues.chromium.org/issues/463335147

CVE-2026-21354

New Project Zero issue:

Samsung: libimagecodec.quram.so DNG out-of-bounds read in DoCopyArea16_R32 during the Render phase

https://project-zero.issues.chromium.org/issues/457401481

CVE-2026-20973

New Project Zero issue:

Samsung: QuramDng Warp opcodes out-of-bounds read

https://project-zero.issues.chromium.org/issues/462544562

CVE-2026-20973

New Project Zero issue:

Samsung: libimagecodec.quram.so buffer overflow in WINKJ_YcbcrWriteOutput1to1_YUV422_H1V2_toRGBA8888 during JPEG decoding

https://project-zero.issues.chromium.org/issues/450884207

CVE-2025-58480

New Project Zero issue:

Samsung: QuramDng FixBadPixelList opcode out-of-bounds read/write

https://project-zero.issues.chromium.org/issues/448241955

CVE-2025-58479

New Project Zero issue:

Samsung: QuramDng opcodes ignore PixelType, leading to out-of-bounds read/writes

https://project-zero.issues.chromium.org/issues/447479300

CVE-2025-58478

New Project Zero issue:

Adobe DNG SDK: Linearize uses full image on trimmed source image, leading to out-of-bounds read

https://project-zero.issues.chromium.org/issues/452483592

CVE-2025-64784

New Project Zero issue:

Adobe DNG SDK: out-of-bounds read in RefBaselineABCDtoRGB during the Render phase

https://project-zero.issues.chromium.org/issues/457419672

CVE-2025-64893

New Project Zero issue:

Adobe DNG SDK: out-of-bounds write in dng_resample_weights::Initialize due to invalid floating point arithmetic

https://project-zero.issues.chromium.org/issues/457987854

CVE-2025-64894

New Project Zero issue:

Adobe DNG SDK: areaSpec overlap miscalculation lead to integer overflow, leading to OOB read/write

https://project-zero.issues.chromium.org/issues/445575206

CVE-2025-64783