EUVD-2026-44522
GHSA-73hf-p3jv-88p6
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malformed C2PA asset
-
DeliverySubmit to media-validation endpoint
-
ExploitTrigger input-validation failure in SDK parser
-
ExecutionApplication crashes (denial of service)
-
ImpactRepeat to sustain outage
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
|
| Exploitation Conditions | Exploitation requires that the target application actually parse or validate attacker-controlled C2PA/Content Credentials input using an affected version - the Rust c2pa SDK (≤0.84.0), @contentauth/c2pa-web (≤0.7.0), or c2patool (≤0.16.5). The concrete prerequisite is an ingestion path that feeds untrusted media/manifests into the SDK (e.g., an upload endpoint, media pipeline, or automated verifier); per CVSS AV:N/AC:L/PR:N/UI:N no authentication and no user interaction are needed against such a path. Limiting factors: the impact is availability-only (A:H, no data exposure), so it cannot be used for RCE or data theft; and systems that only run c2patool manually on trusted local files, or that do not expose C2PA parsing to untrusted input, are not remotely exploitable in practice. |
| Impact | The signals are moderate and internally consistent rather than alarming. CVSS 7.5 reflects the network, low-complexity, unauthenticated, no-interaction vector (AV:N/AC:L/PR:N/UI:N) but the impact is limited to availability (A:H) with no data compromise. EPSS is low at 0.41% (33rd percentile), and there is no CISA KEV listing and no public exploit identified, so widespread active exploitation is not indicated. The counterweight is CISA SSVC, which rates the issue Automatable=yes with Technical Impact=partial and Exploitation=none - meaning no observed exploitation today, but an attacker who develops a crash payload could reliably automate it against many targets. The realistic priority is therefore driven by exposure: services that automatically validate untrusted uploaded media with these SDKs face a genuine DoS risk, whereas offline/manual c2patool use is low risk. No conflicting data was observed; the CVSS availability-only rating aligns with the DoS description. |
| Exploit ScenarioDerived | An attacker crafts a media file (or asset with a malformed C2PA manifest) and submits it to a public service that automatically verifies Content Credentials - for example an upload/moderation pipeline or a web app using c2pa-web. When the SDK parses the crafted input it crashes, and because the attack is network-based, low-complexity, unauthenticated, and requires no user interaction, the attacker can repeatedly submit the payload to keep the service unavailable. No public proof-of-concept has been identified, but SSVC rates the issue as automatable, so a single working payload could be scripted against many endpoints. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 22, 2026
Denial-of-service in Adobe's Content Credentials (C2PA) SDK ecosystem lets a remote attacker crash any application that ingests attacker-supplied C2PA-signed assets. The flaw stems from improper input validation (CWE-20) in the Rust c2pa SDK, the @contentauth/c2pa-web JS SDK, and the c2patool command-line utility; exploitation requires no user interaction and no authentication (CVSS 7.5, A:H). No public exploit code has been identified and it is not in CISA KEV, though CISA's SSVC framework flags it as automatable, meaning a working exploit could be scaled easily.
RemediationAI
Vendor-released patches are available and are the primary fix: upgrade the Rust SDK to c2pa-v0.85.2 or later, the web SDK to @contentauth/c2pa-web@0.9.0 or later, and the CLI to c2patool-v0.26.65 or later, per Adobe advisory APSB26-80 (https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html). Because the fix touches shared parsing logic, update every deployed variant, including transitive dependencies that vendor the c2pa crate or WASM binding. Where immediate patching is not possible for a service that validates untrusted media, apply compensating controls: gate C2PA validation behind isolated, resource-limited worker processes or sandboxes that can be restarted so a crash does not take down the main service (trade-off: added latency and infrastructure); enforce strict upload size/type limits and rate-limiting on endpoints that trigger C2PA parsing to blunt automated crash attempts (trade-off: may reject some legitimate large assets); and defer or disable automatic Content Credentials validation on untrusted user uploads until patched (trade-off: temporary loss of provenance verification).
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
C2PA (Coalition for Content Provenance and Authenticity) is the open standard behind 'Content Credentials' - cryptographically signed provenance manifests embedded in images, video, and other media to attest to their origin and edit history. Adobe maintains the reference implementations: the Rust core SDK (cpe:2.3:a:adobe:c2pa), the Node.js/WASM web binding (cpe:2.3:a:adobe:c2pa-web), and the c2patool CLI (cpe:2.3:a:adobe:c2patool). The vulnerability is a CWE-20 Improper Input Validation defect in the manifest/asset parsing path: when the library reads a malformed or crafted C2PA structure it fails to validate the input safely and terminates abnormally (e.g., panic/unhandled error/resource exhaustion), producing an availability-only impact with no confidentiality or integrity effect (C:N/I:N/A:H).
Know when C2Pa gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Untrusted media parsed over the network needs no auth or interaction (AV:N/AC:L/PR:N/UI:N); DoS-only impact gives C:N/I:N/A:H with no scope change.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Executive ViewAI
Adobe's Content Credentials (C2PA) SDK ecosystem is vulnerable to unauthenticated remote denial-of-service attacks when processing attacker-supplied signed assets, affecting applications across Rust, JavaScript, and command-line implementations. Organizations relying on C2PA for content authentication and supply chain verification face application availability risks with no vendor patch currently available. The vulnerability's automatable nature and broad implementation footprint create significant operational exposure.
No vendor-released patch identified at time of analysis. Interim mitigations: implement mandatory input validation and size limits on C2PA asset ingestion; deploy rate limiting and request throttling on asset verification endpoints; restrict network-level access to C2PA-processing applications; disable C2PA processing where operationally feasible; maintain comprehensive logging of all C2PA verification attempts for forensic analysis and attack detection. Establish daily monitoring of Adobe and CISA advisories for patch availability.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Server-side request forgery in Adobe Content Credentials (CAI Content Credentials SDK) allows unauthenticated remote att
Server-Side Request Forgery in Adobe's C2PA (Content Credentials) SDK family - the Rust SDK (c2pa), the Node.js web SDK
Denial of service in Adobe's CAI (Content Authenticity Initiative) Content Credentials SDK stems from uncontrolled resou
Uncontrolled resource consumption in the Adobe CAI Content Credentials SDK lets unauthenticated, remote attackers exhaus
Improper input validation in the Adobe CAI Content Credentials SDK allows remote, unauthenticated attackers to bypass a
Improper input validation in the CAI Content Credentials SDK (Adobe security bulletin APSB26-163) lets unauthenticated r
Unauthenticated remote attackers can bypass a security feature in Adobe's CAI Content Credentials SDK and gain unauthori
Improper input validation in the CAI Content Credentials SDK allows a remote, unauthenticated attacker to feed crafted i
Integer overflow (CWE-190) in the CAI Content Credentials SDK lets unauthenticated remote attackers crash applications t
Denial-of-service in the CAI Content Credentials SDK allows remote unauthenticated attackers to exhaust system resources
Denial of service in the CAI Content Credentials SDK allows remote, unauthenticated attackers to exhaust system resource
Application denial-of-service in the Adobe CAI Content Credentials SDK lets unauthenticated remote attackers exhaust sys
Exploit-DB