EUVD-2026-56273
GHSA-99xw-7776-rq87
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft media file with underflow-triggering C2PA manifest integer
-
DeliveryDeliver file to target application's ingestion endpoint
-
ExploitApplication invokes vulnerable SDK parser on file
-
ExecutionInteger underflow corrupts internal size variable
-
PersistParser panics or invalid memory access terminates process
-
ImpactApplication denial-of-service achieved
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Integer underflow checks
|
| Exploitation Conditions | The target application must be running one of the unpatched SDK versions - Rust c2pa ≤0.90.5, @contentauth/c2pa-web ≤0.12.0, or c2patool ≤0.27.5 - and must parse an attacker-controlled C2PA manifest file. Per the CVSS AV:L vector, the attacker must deliver the malicious file into the local parsing context, such as through a file upload endpoint, shared storage path, or by causing the application to fetch the file. No special privileges are required once the file reaches the parser; the CVSS PR:N metric confirms no authentication is needed to trigger the underflow after file delivery. Exploitation is strictly limited to applications and pipelines that actively invoke these SDKs to process C2PA content credentials; systems that do not use CAI Content Credentials tooling are entirely unaffected. |
| Impact | The NVD-assigned CVSS 6.2 Medium score with vector AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H correctly frames this as a local-vector availability-only issue. The local attack vector (AV:L) is the primary risk limiter: an attacker cannot directly trigger the crash over the network without first placing a malicious file into a parsing context. No EPSS score was included in the provided intelligence, no CISA KEV listing exists, and no POC code has been disclosed - three independent signals that current exploitation pressure is low. The real-world risk concentrates in services that automatically ingest user-uploaded media and invoke the SDK to verify C2PA provenance, where a crafted upload could crash a processing worker. There is zero confidentiality or integrity exposure; the blast radius is limited strictly to service availability for the affected parsing process. |
| Exploit ScenarioDerived | An attacker targeting a media platform's C2PA provenance-verification pipeline uploads a crafted image or video file containing a malformed manifest with a specially constructed integer length field. When the platform's backend worker invokes the Content Credentials SDK to authenticate the file's provenance, the parser encounters the underflowing value, corrupts an internal size calculation, and the process panics and exits. No public exploit code has been identified, but integer underflow bugs in parsers are mechanically straightforward to discover through fuzzing once the affected code path is known. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Aug 11, 2026
Integer underflow in Adobe's Content Credentials SDK crashes any application that parses a specially crafted C2PA manifest file, producing a denial-of-service condition. The Rust crate (c2pa ≤0.90.5), JavaScript/WASM package (@contentauth/c2pa-web ≤0.12.0), and CLI tool (c2patool ≤0.27.5) are all affected, with patched releases confirmed by Adobe advisory APSB26-111. No public exploit code and no CISA KEV listing have been identified at time of analysis; real-world impact is highest in automated media ingestion pipelines that validate C2PA provenance on user-supplied files.
RemediationAI
Upgrade immediately to the patched versions confirmed by Adobe APSB26-111: Rust SDK to c2pa-v0.90.6 (via Cargo.toml update), JavaScript SDK to @contentauth/c2pa-web@0.12.1 (via npm/yarn upgrade), and CLI tool to c2patool-v0.27.6 (via direct binary replacement or package manager). Full advisory is at https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-111.html. Where immediate patching is not feasible, restrict C2PA file parsing to internally generated or cryptographically pre-screened content only - trade-off: third-party provenance validation is disabled. Additionally, run SDK parsing workers in isolated containers or processes with watchdog-based auto-restart so that a crash does not take down the broader service; this limits DoS impact but does not prevent individual request failures.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Content Credentials implements the C2PA (Coalition for Content Provenance and Authenticity) open standard, which embeds cryptographic provenance manifests inside media files. CWE-191 (Integer Underflow/Wraparound) arises when a size or length value derived from parsing the manifest is decremented below zero - or below the minimum of an unsigned integer type - causing it to wrap to a very large positive value. That corrupt value is subsequently used in memory allocation or buffer-slicing logic, typically producing a panic or an invalid memory access that terminates the process. The vulnerability spans three distinct release artifacts maintained under the Adobe contentauth organization: the Rust crate c2pa, the npm/WASM package @contentauth/c2pa-web, and the c2patool command-line binary, all of which share C2PA manifest parsing logic.
Know when C2Pa gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Local vector because exploitation requires a crafted file to reach the parser; PR:N as no privileges needed post-delivery; availability-only impact with no confidentiality or integrity loss.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Integer overflow occurs when an arithmetic operation produces a result that exceeds the maximum value a given integer type can store.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Server-side request forgery in Adobe Content Credentials (CAI Content Credentials SDK) allows unauthenticated remote att
Server-Side Request Forgery in Adobe's C2PA (Content Credentials) SDK family - the Rust SDK (c2pa), the Node.js web SDK
Denial of service in Adobe's CAI (Content Authenticity Initiative) Content Credentials SDK stems from uncontrolled resou
Uncontrolled resource consumption in the Adobe CAI Content Credentials SDK lets unauthenticated, remote attackers exhaus
Improper input validation in the Adobe CAI Content Credentials SDK allows remote, unauthenticated attackers to bypass a
Improper input validation in the CAI Content Credentials SDK (Adobe security bulletin APSB26-163) lets unauthenticated r
Unauthenticated remote attackers can bypass a security feature in Adobe's CAI Content Credentials SDK and gain unauthori
Improper input validation in the CAI Content Credentials SDK allows a remote, unauthenticated attacker to feed crafted i
Integer overflow (CWE-190) in the CAI Content Credentials SDK lets unauthenticated remote attackers crash applications t
Denial-of-service in the CAI Content Credentials SDK allows remote unauthenticated attackers to exhaust system resources
Denial of service in the CAI Content Credentials SDK allows remote, unauthenticated attackers to exhaust system resource
Application denial-of-service in the Adobe CAI Content Credentials SDK lets unauthenticated remote attackers exhaust sys
Exploit-DB