EUVD-2026-100742
GHSA-h4f4-xvfc-627f
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessSubmit crafted media/manifest to SDK consumer
-
ExploitTrigger integer overflow in parser
-
ExecutionMemory/size calculation wraps
-
ImpactApplication crashes (denial of service)
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Integer overflow checks
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires that the target application or service actually invoke the CAI Content Credentials SDK to parse/verify attacker-controlled input - specifically a media asset or embedded C2PA Content Credentials manifest whose field causes the integer overflow. Per the input, no user interaction is required (UI:N) and no authentication is indicated (PR:N), so a service that automatically ingests and validates uploaded or fetched media is directly exposed. Limiting factors: the vulnerable SDK version must be deployed and must process untrusted/externally-sourced content; deployments that only handle trusted, internally-generated assets, or that do not expose the parsing path to external input, face substantially lower real-world risk. Impact is confined to a crash (availability loss); no data disclosure or modification occurs. |
| Impact | Signals point to a moderate, denial-of-service-only issue rather than a top-tier priority. The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base 7.5) describes a remotely reachable, low-complexity, unauthenticated integer-overflow (CWE-190) whose sole impact is availability (A:H) - there is no confidentiality or integrity loss, so the 'HIGH' rating is driven entirely by a crash/DoS outcome, not code execution or data compromise. No EPSS score, no CISA KEV listing, and no public POC were supplied, which is consistent with 'no public exploit identified at time of analysis' and argues against treating this as actively dangerous today. The network attack vector is plausible but context-dependent: the CAI Content Credentials SDK is a library that parses C2PA manifests embedded in media files, so AV:N holds only where the SDK is exposed to attacker-supplied input (e.g., a service verifying uploaded images). Overall this is a real but bounded risk - prioritize patching for internet-facing services that ingest untrusted media, and lower for offline/desktop embedding. Note: the DoS-only impact means a maximal realistic outcome is a crash, not takeover; verify affected/fixed versions against Adobe APSB26-163, which was not independently retrieved for this analysis. |
| Exploit ScenarioDerived | An attacker crafts a media file (or C2PA manifest) with field values engineered to trigger an integer overflow in the SDK's parsing logic, then submits it to a service or application that uses the CAI Content Credentials SDK to read/verify content credentials. Parsing the malformed input wraps an internal length/size calculation and crashes the application, producing a denial of service with no user interaction required. No public exploit code was identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 13, 2026
Integer overflow (CWE-190) in the CAI Content Credentials SDK lets unauthenticated remote attackers crash applications that parse externally supplied media or embedded Content Credentials manifests, producing a denial-of-service condition. Affected deployments are those that invoke the SDK against untrusted input - for example services that automatically ingest and verify uploaded or fetched media - while systems that only process trusted, internally generated assets are far less exposed. The vulnerability is rated CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), requires no user interaction, causes availability loss only (no disclosure or modification), and no public exploit code has been identified at time of analysis; the vendor advisory is Adobe APSB26-163.
RemediationAI
No fixed SDK version is specified in the available data, so treat Adobe advisory APSB26-163 as the authoritative source and upgrade the CAI Content Credentials SDK to the release it designates; downstream products that bundle the SDK must be updated to the vendor build that incorporates that fix. Until an upgrade can be staged, the highest-value compensating control is to stop feeding untrusted input into the parsing path: disable automatic verification of user-uploaded or externally fetched media and require assets to pass a quarantine step first, accepting the loss of automated provenance checks. Where verification must remain online, run manifest parsing in a disposable, resource-capped child process or sandbox (separate container, low memory/CPU limits, restart-on-failure) so an overflow crashes only the worker instead of the primary service - the trade-off is added latency and worker supervision overhead. Additional measures include enforcing strict maximum sizes and structural depth limits on uploaded files and manifests before they reach the SDK, and rate-limiting or authenticating upload endpoints; note that size caps may reject legitimate large assets, and access restrictions do not remediate the flaw for users who genuinely need ingestion. Monitor the advisory for version-specific guidance.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The CAI (Content Authenticity Initiative) Content Credentials SDK is Adobe's implementation for producing and validating C2PA Content Credentials, the cryptographically signed provenance manifests embedded in media files. Parsing such a manifest requires walking attacker-influenced structural fields - box/segment lengths, chunk sizes, and offset counters - before any signature verification takes place. CWE-190 (Integer Overflow or Wraparound) arises in this class of parser when arithmetic on a length or size value wraps around the width of its integer type, so a computed size becomes smaller or otherwise inconsistent with the amount of data the code subsequently processes; the resulting out-of-bounds access or failed allocation terminates the process. Because the defect sits in the pre-validation parsing path, it is reachable remotely (AV:N) with low complexity and without authentication or user interaction. The impact is scoped entirely to availability (C:N/I:N/A:H on an unchanged scope), consistent with a crash-only outcome rather than memory corruption exploitable for code execution. No CPE strings or explicit version ranges were supplied with this record, so the precise affected SDK builds must be read from the Adobe advisory.
Know when C2Pa gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SDK parses externally-supplied media so AV:N/AC:L/PR:N/UI:N; integer overflow only crashes the app, giving A:H with C:N/I:N and no scope change.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Executive ViewAI
The CAI Content Credentials SDK is affected by an integer overflow vulnerability (CVE-2026-100136) that enables unauthenticated remote attackers to cause a denial-of-service condition in applications that parse untrusted media or Content Credentials manifests. Organizations operating services that automatically ingest external media are at risk of availability disruptions, while systems processing only trusted internal assets are less exposed. With no vendor-released patch identified at time of analysis and no public exploit identified, leadership should prioritize immediate exposure reduction and monitor Adobe advisory APSB26-163 for updates.
No vendor-released patch identified at time of analysis. Interim mitigations: restrict SDK usage to trusted internally generated assets; disable automatic ingestion of external media; implement input validation and size limits; sandbox or isolate SDK processes; monitor Adobe advisory APSB26-163 for patch availability.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Integer overflow occurs when an arithmetic operation produces a result that exceeds the maximum value a given integer type can store.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Server-side request forgery in Adobe Content Credentials (CAI Content Credentials SDK) allows unauthenticated remote att
Server-Side Request Forgery in Adobe's C2PA (Content Credentials) SDK family - the Rust SDK (c2pa), the Node.js web SDK
Denial of service in Adobe's CAI (Content Authenticity Initiative) Content Credentials SDK stems from uncontrolled resou
Uncontrolled resource consumption in the Adobe CAI Content Credentials SDK lets unauthenticated, remote attackers exhaus
Improper input validation in the Adobe CAI Content Credentials SDK allows remote, unauthenticated attackers to bypass a
Improper input validation in the CAI Content Credentials SDK (Adobe security bulletin APSB26-163) lets unauthenticated r
Unauthenticated remote attackers can bypass a security feature in Adobe's CAI Content Credentials SDK and gain unauthori
Improper input validation in the CAI Content Credentials SDK allows a remote, unauthenticated attacker to feed crafted i
Denial-of-service in the CAI Content Credentials SDK allows remote unauthenticated attackers to exhaust system resources
Denial of service in the CAI Content Credentials SDK allows remote, unauthenticated attackers to exhaust system resource
Application denial-of-service in the Adobe CAI Content Credentials SDK lets unauthenticated remote attackers exhaust sys
Uncontrolled resource consumption in Adobe's CAI Content Credentials SDK enables remote unauthenticated attackers to exh
Exploit-DB