CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.5 · adobeNVD modified 2026-10-14 18:57
Affected (CPE criteria) 3
cpe:2.3:a:adobe:c2pa:*:*:*:*:*:rust:*:*cpe:2.3:a:adobe:c2pa-web:*:*:*:*:*:node.js:*:*cpe:2.3:a:adobe:c2patool:*:*:*:*:*:*:*:*