CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 3
- Cpes+3 CPE criteria (now 3)NVD modified 2026-10-15 18:30
- StatusUndergoing Analysis → AnalyzedNVD modified 2026-10-15 18:30
- First seenCVSS 7.5NVD modified 2026-10-14 19:16
Affected (CPE criteria) 3
cpe:2.3:a:adobe:c2pa:*:*:*:*:*:rust:*:*cpe:2.3:a:adobe:c2pa-web:*:*:*:*:*:node.js:*:*cpe:2.3:a:adobe:c2patool:*:*:*:*:*:*:*:*