EUVD-2026-56560
GHSA-qjjr-945q-3x93
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessSubmit crafted C2PA-signed media file
-
DeliverySDK parser processes malformed provenance manifest
-
ExploitUnbounded resource allocation triggered
-
ExecutionProcess memory/CPU exhausted
-
ImpactApplication DoS condition reached
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V2 - Validation and Business Logic Resource consumption limits
MITRE ATT&CK
1 technique across 1 tactic: Impact The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | No special conditions are required for exploitation against server-side deployments that accept externally-supplied media files for C2PA parsing - the CVSS vector AV:N/AC:L/PR:N/UI:N confirms remote unauthenticated exploitation against any network-reachable endpoint invoking these SDK components. The limiting factor is whether the SDK is exposed to untrusted input: server-side content-ingestion pipelines and provenance-verification APIs are fully exposed, while isolated CLI usage on trusted files is not. No specific non-default configuration setting is called out in the advisory as a prerequisite. The scope is unchanged (S:U), meaning the DoS is contained to the application process rather than the underlying host OS. |
| Impact | The provided CVSS 7.5 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) accurately reflects the threat profile: network-reachable, unauthenticated, zero-complexity exploitation with full availability impact. In practice, risk is highest for server-side deployments that accept user-submitted media files for C2PA verification - a common pattern in content publishing and provenance-verification pipelines. Client-side or CLI deployments are less exposed since an attacker would need to induce a user to process a malicious file. No EPSS data was provided in the input, no CISA KEV listing exists, and no public POC has been identified, so while the theoretical exploitability is high (trivial CVSS parameters), there is no evidence of active or near-term opportunistic exploitation. The impact ceiling is pure availability - confidentiality and integrity are unaffected - which limits blast radius. Organizations running automated ingestion pipelines that call these SDKs on untrusted media are the primary real-world concern. |
| Exploit ScenarioDerived | An attacker submits a specially crafted C2PA-signed media file - such as a JPEG or MP4 with a pathologically nested or excessively large provenance manifest - to a web service that calls the c2pa SDK to verify content credentials on ingest. The SDK enters an unbounded parsing loop or allocates memory without limit while processing the malformed manifest, causing the service process to exhaust available RAM or CPU, ultimately crashing or becoming unresponsive and denying service to legitimate users. No public POC exists at time of analysis, but the network-reachable, unauthenticated nature of the CVSS vector means any attacker who can reach the ingestion endpoint can attempt this. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Aug 11, 2026
Uncontrolled resource consumption in Adobe's CAI Content Credentials SDK enables remote unauthenticated attackers to exhaust system resources and cause an application denial-of-service. Three distinct SDK components are affected: the Rust SDK (c2pa), the JavaScript/WebAssembly SDK (@contentauth/c2pa-web), and the command-line tool (c2patool), all across their respective versions prior to the patched releases. No public exploit code or active exploitation has been identified at time of analysis, though the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates this is trivially exploitable without authentication or user interaction.
RemediationAI
Vendor-released patches are available for all three affected components. Upgrade the Rust SDK to c2pa-v0.90.6 or later, the JavaScript SDK to @contentauth/c2pa-web@0.12.1 or later, and the command-line tool to c2patool-v0.27.6 or later. Full details are in Adobe's security advisory APSB26-111 at https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-111.html. For environments where immediate patching is not feasible, compensating controls should include restricting which sources may submit media files for C2PA processing (allowlist trusted origins), enforcing upload size limits and request rate limits at the API gateway or CDN layer before files reach the SDK, and running the SDK in an isolated process or container with hard memory and CPU cgroup limits so resource exhaustion is contained and does not cascade to the host or co-located services.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The CAI Content Credentials ecosystem implements the C2PA (Coalition for Content Provenance and Authenticity) open specification for embedding and verifying provenance metadata in digital media files. The vulnerability is classified as CWE-400 (Uncontrolled Resource Consumption), a root-cause class in which the software fails to enforce limits on the amount of resources it allocates or processes in response to externally-supplied input - typically triggered by parsing maliciously crafted media files with pathological metadata structures. Affected CPE-identified components span the Rust-native c2pa crate (≤0.90.5), the WebAssembly-compiled JavaScript SDK (@contentauth/c2pa-web ≤0.12.0), and the c2patool CLI (≤0.27.5). When these SDKs process a specially constructed C2PA-signed artifact, the parser can be induced to allocate unbounded memory or CPU cycles without a termination condition, starving legitimate workloads.
Know when C2Pa gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Network-reachable unauthenticated parsing with no complexity barriers; impact is purely availability with no confidentiality or integrity exposure.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Executive ViewAI
Adobe's Content Credentials SDK (affecting Rust c2pa, JavaScript/WebAssembly @contentauth/c2pa-web, and c2patool) contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to disable applications relying on these libraries. Any organization using these SDKs for content verification faces potential service disruption from trivially exploitable DoS attacks. Leadership should prioritize assessment of deployed SDK versions and immediate mitigation deployment.
No vendor-released patch identified at time of analysis. Deploy rate limiting and request throttling on endpoints consuming the affected SDKs to cap resource consumption per request; deploy Web Application Firewall rules to detect and block request patterns indicative of resource exhaustion attacks; isolate affected SDK components behind API gateways with enforced request concurrency caps; implement continuous monitoring of CPU and memory resource utilization on affected systems; configure automated alerting for sustained resource consumption spikes.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Server-side request forgery in Adobe Content Credentials (CAI Content Credentials SDK) allows unauthenticated remote att
Server-Side Request Forgery in Adobe's C2PA (Content Credentials) SDK family - the Rust SDK (c2pa), the Node.js web SDK
Denial of service in Adobe's CAI (Content Authenticity Initiative) Content Credentials SDK stems from uncontrolled resou
Uncontrolled resource consumption in the Adobe CAI Content Credentials SDK lets unauthenticated, remote attackers exhaus
Improper input validation in the Adobe CAI Content Credentials SDK allows remote, unauthenticated attackers to bypass a
Improper input validation in the CAI Content Credentials SDK (Adobe security bulletin APSB26-163) lets unauthenticated r
Unauthenticated remote attackers can bypass a security feature in Adobe's CAI Content Credentials SDK and gain unauthori
Improper input validation in the CAI Content Credentials SDK allows a remote, unauthenticated attacker to feed crafted i
Integer overflow (CWE-190) in the CAI Content Credentials SDK lets unauthenticated remote attackers crash applications t
Denial-of-service in the CAI Content Credentials SDK allows remote unauthenticated attackers to exhaust system resources
Denial of service in the CAI Content Credentials SDK allows remote, unauthenticated attackers to exhaust system resource
Application denial-of-service in the Adobe CAI Content Credentials SDK lets unauthenticated remote attackers exhaust sys
Exploit-DB