EUVD-2026-44518
GHSA-5hq2-2w88-w4q8
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malformed C2PA manifest/asset
-
DeliverySubmit to C2PA-verifying service
-
ExploitImproper input validation not caught
-
ExecutionParser crashes process
-
PersistApplication denial-of-service
-
ImpactRepeat to sustain outage
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
|
| Exploitation Conditions | Exploitation requires that the target application invoke a vulnerable Adobe C2PA component (c2pa Rust SDK ≤0.84.0, c2patool ≤0.16.5, or @contentauth/c2pa-web ≤0.7.0) on attacker-controlled input - specifically a crafted asset or C2PA/Content Credentials manifest submitted through whatever channel the app uses to read or verify provenance data. Per the description, no user interaction is required (UI:N) and no authentication is needed (PR:N). The key limiting factor is exposure of the parsing path: the flaw is only reachable if untrusted, externally supplied media reaches the SDK's validation routine - a deployment that only processes local, trusted files (e.g. c2patool in an offline build pipeline) is not remotely exploitable. Impact is confined to availability; no data disclosure or code execution results. |
| Impact | Signals are consistent but point to a moderate, availability-only risk rather than a top-tier emergency. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/A:H, base 7.5) reflects easy, unauthenticated, no-interaction triggering with a pure availability impact (C:N/I:N) - there is no code execution or data exposure. CISA SSVC agrees on severity contour: Exploitation 'none' (not observed in the wild), Automatable 'yes' (the crash can be scripted at scale), Technical Impact 'partial'. EPSS is low at 0.41% (33rd percentile), and there is no KEV listing and no public POC, so real-world urgency is currently low. The main caveat is exposure-dependent: AV:N assumes the SDK is fed remote/untrusted input; for a tool like c2patool run only against local trusted files, practical attack surface is smaller than the network vector implies - teams should confirm how their deployment sources the media it validates. |
| Exploit ScenarioDerived | An attacker uploads or transmits a crafted media file with a malformed C2PA manifest to a service that automatically verifies Content Credentials using the c2pa SDK or c2patool. When the service parses the manifest, the improper input validation triggers a crash, taking the verification service (or the whole application) offline; because triggering is unauthenticated and requires no user interaction and is automatable, the attacker can repeat it to sustain the outage. No public exploit code has been identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 22, 2026
Denial-of-service in Adobe's C2PA / Content Credentials SDKs allows a remote attacker to crash any application built on the c2pa Rust SDK (≤0.84.0), the c2patool command-line utility (≤0.16.5), or the @contentauth/c2pa-web JavaScript SDK (≤0.7.0) by supplying malformed input that the library fails to validate. Because exploitation requires no authentication and no user interaction, an application that ingests attacker-controlled assets or manifests can be reliably knocked offline. There is no public exploit identified at time of analysis, and the low EPSS (0.41%) with CISA SSVC exploitation status of 'none' indicates no observed activity yet, though the flaw is assessed as automatable.
RemediationAI
Vendor-released patch: upgrade the Rust SDK to c2pa-v0.85.2, the command-line tool to c2patool-v0.26.65, and the JS SDK to @contentauth/c2pa-web@0.9.0, as documented in Adobe advisory APSB26-80 (https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html); rebuild and redeploy any downstream application that statically links these libraries, since patching the app binary alone is not sufficient if it bundles a vulnerable version. Until upgrades land, reduce exposure by not passing untrusted or externally sourced assets directly into the SDK's parsing/verification path - validate or sandbox file ingestion, enforce strict size and format limits before handing data to c2pa, and run the parsing component as an isolated, restartable worker process so a crash degrades rather than takes down the whole service; the trade-off is added latency and architectural complexity, and these controls only limit blast radius rather than eliminate the crash. There is no confidentiality or integrity risk, so the priority is availability resilience.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
C2PA (Coalition for Content Provenance and Authenticity) is an open standard for cryptographically signed content provenance / Content Credentials, embedded as manifests in media files. The affected components are Adobe's reference implementations: the Rust core SDK (cpe:2.3:a:adobe:c2pa, ecosystem 'rust'), the c2patool CLI, and the c2pa-web binding (ecosystem 'node.js'). The root cause is CWE-20 (Improper Input Validation): the manifest/asset-parsing path accepts untrusted input without adequately validating structure or bounds, and a malformed input drives the process into a crash (e.g. panic, unhandled exception, or resource exhaustion). Any downstream product that links these libraries to read or verify Content Credentials inherits the exposure.
Know when C2Pa gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Unauthenticated, no-interaction crash from a crafted input parsed by the library gives AV:N/AC:L/PR:N/UI:N; impact is availability-only (A:H) with no confidentiality or integrity effect.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Executive ViewAI
An unauthenticated denial-of-service vulnerability in Adobe's Content Credentials (C2PA) SDKs allows remote attackers to crash applications that validate digital asset provenance. Organizations relying on C2PA for content authentication, media management, or supply chain transparency workflows face service availability risk. No vendor-released patch identified at time of analysis, requiring immediate assessment and interim protective measures.
Implement strict input validation and schema enforcement on all externally sourced media manifests and assets before SDK processing. Deploy rate limiting and request throttling on asset and manifest ingestion endpoints. Enable application crash detection and alerting with automated failover to standby instances. Where feasible, restrict manifest ingestion to known trusted sources until patch availability. Maintain backup or read-only instances of C2PA-dependent services to minimize denial-of-service impact.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Server-side request forgery in Adobe Content Credentials (CAI Content Credentials SDK) allows unauthenticated remote att
Server-Side Request Forgery in Adobe's C2PA (Content Credentials) SDK family - the Rust SDK (c2pa), the Node.js web SDK
Denial of service in Adobe's CAI (Content Authenticity Initiative) Content Credentials SDK stems from uncontrolled resou
Uncontrolled resource consumption in the Adobe CAI Content Credentials SDK lets unauthenticated, remote attackers exhaus
Improper input validation in the Adobe CAI Content Credentials SDK allows remote, unauthenticated attackers to bypass a
Improper input validation in the CAI Content Credentials SDK (Adobe security bulletin APSB26-163) lets unauthenticated r
Unauthenticated remote attackers can bypass a security feature in Adobe's CAI Content Credentials SDK and gain unauthori
Improper input validation in the CAI Content Credentials SDK allows a remote, unauthenticated attacker to feed crafted i
Integer overflow (CWE-190) in the CAI Content Credentials SDK lets unauthenticated remote attackers crash applications t
Denial-of-service in the CAI Content Credentials SDK allows remote unauthenticated attackers to exhaust system resources
Denial of service in the CAI Content Credentials SDK allows remote, unauthenticated attackers to exhaust system resource
Application denial-of-service in the Adobe CAI Content Credentials SDK lets unauthenticated remote attackers exhaust sys
Exploit-DB