EUVD-2026-44526
GHSA-c5hm-56x3-6335
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malformed C2PA manifest in media file
-
DeliverySubmit file to C2PA parsing library
-
ExploitParser enters unbounded resource loop
-
ExecutionProcess memory/CPU exhausted
-
ImpactApplication crash or denial-of-service
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V2 - Validation and Business Logic Resource consumption limits
MITRE ATT&CK
1 technique across 1 tactic: Impact The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The affected code path is triggered when a C2PA library (Rust SDK, c2patool, or c2pa-web) attempts to parse a specially crafted C2PA manifest embedded in a media file. For c2patool, the attacker must be able to provide a crafted file as input to the CLI process - typically a local or operator-controlled scenario. For c2pa-web deployed in a Node.js server, an external attacker can supply the crafted file via any upload mechanism the application exposes, making the effective prerequisite only network reachability to that endpoint. No user interaction is required per CVSS UI:N, and no authentication is required per PR:N. Exploitation is bounded by SSVC Automatable: no, suggesting reliable triggering may require specific manifest structure knowledge. The vulnerability affects only availability - confidentiality and integrity are not impacted. |
| Impact | The CVSS base score of 6.2 with AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H reflects a local-vector denial-of-service with no confidentiality or integrity impact. However, the c2pa-web Node.js SDK is explicitly designed for server-side processing of user-uploaded or network-sourced content, which elevates the practical attack surface beyond local access in some deployments - the assigned AV:L may understate risk for web-facing integrations. EPSS at 0.15% (5th percentile) is very low, and SSVC reports Exploitation: none and Automatable: no, further confirming limited real-world exploitation probability. The Technical Impact is rated partial (availability only). No KEV listing and no public exploit code has been identified. The overall picture is a moderate-severity, low-urgency issue: organizations using c2pa-web in a pipeline that processes untrusted uploads face slightly higher real risk than those running c2patool in operator-controlled workflows. The primary concern is service disruption, not data breach. |
| Exploit ScenarioDerived | An attacker submits a crafted media file containing a malformed C2PA manifest - for example, via a web upload endpoint backed by the c2pa-web SDK - causing the parser to enter an unbounded resource-consumption loop. The hosting Node.js process accumulates memory until it is killed by the OS or crashes, rendering the content-verification service unavailable. No public proof-of-concept has been identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 22, 2026
Uncontrolled resource consumption in Adobe's C2PA Content Credentials Rust SDK, CLI tool (c2patool), and JavaScript web SDK allows a local attacker supplying a crafted input to exhaust system resources and crash the application. All three library families are affected across distinct runtimes - Rust, Node.js, and native binary - with patched releases available for each. No public exploit exists, SSVC classifies exploitation as none, and EPSS sits at the 5th percentile, indicating low real-world exploitation pressure despite the zero-user-interaction requirement.
RemediationAI
Upgrade to the patched releases confirmed by Adobe PSIRT and EUVD: Rust SDK to c2pa-v0.85.2, Command-Line Tool to c2patool-v0.26.65, and JavaScript Web SDK to @contentauth/c2pa-web@0.9.0. The full vendor advisory is at https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html (APSB26-80). If immediate upgrade is not feasible for the c2pa-web deployment, restrict the file-upload endpoint to authenticated and rate-limited clients to reduce the ability of an external attacker to submit crafted manifests at volume - be aware this trades usability for risk reduction. For c2patool in automated pipelines, limit input sources to trusted, internally generated files and avoid processing user-supplied media until patched. No known workaround eliminates the root cause; patching is the only confirmed fix.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The Coalition for Content Provenance and Authenticity (C2PA) standard embeds cryptographically signed provenance manifests inside media files. Adobe's reference implementations - the Rust SDK (cpe:2.3:a:adobe:c2pa:*:*:*:*:*:rust:*:*), the Node.js web SDK (cpe:2.3:a:adobe:c2pa-web:*:*:*:*:*:node.js:*:*), and the standalone command-line tool (cpe:2.3:a:adobe:c2patool:*:*:*:*:*:*:*:*) - all parse these manifests during content verification. CWE-400 (Uncontrolled Resource Consumption) indicates a parsing path that does not impose bounds on memory allocation, loop iteration, or recursion depth when encountering a malformed or adversarially crafted C2PA manifest, ultimately causing the hosting process to exhaust available resources. The flaw spans three distinct codebases sharing the same conceptual parsing logic.
Know when C2Pa gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
c2pa-web processes remotely-submitted content in Node.js servers, making AV:N the realistic attack vector for the most exposed deployment; no auth or interaction required.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Server-side request forgery in Adobe Content Credentials (CAI Content Credentials SDK) allows unauthenticated remote att
Server-Side Request Forgery in Adobe's C2PA (Content Credentials) SDK family - the Rust SDK (c2pa), the Node.js web SDK
Denial of service in Adobe's CAI (Content Authenticity Initiative) Content Credentials SDK stems from uncontrolled resou
Uncontrolled resource consumption in the Adobe CAI Content Credentials SDK lets unauthenticated, remote attackers exhaus
Improper input validation in the Adobe CAI Content Credentials SDK allows remote, unauthenticated attackers to bypass a
Improper input validation in the CAI Content Credentials SDK (Adobe security bulletin APSB26-163) lets unauthenticated r
Unauthenticated remote attackers can bypass a security feature in Adobe's CAI Content Credentials SDK and gain unauthori
Improper input validation in the CAI Content Credentials SDK allows a remote, unauthenticated attacker to feed crafted i
Integer overflow (CWE-190) in the CAI Content Credentials SDK lets unauthenticated remote attackers crash applications t
Denial-of-service in the CAI Content Credentials SDK allows remote unauthenticated attackers to exhaust system resources
Denial of service in the CAI Content Credentials SDK allows remote, unauthenticated attackers to exhaust system resource
Application denial-of-service in the Adobe CAI Content Credentials SDK lets unauthenticated remote attackers exhaust sys
Exploit-DB