EUVD-2026-84768
GHSA-9ph8-pmhm-8hh4
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessHost malicious C2PA asset on crafted URL/page
-
DeliveryVictim opens URL feeding asset to SDK/CLI
-
ExploitMalformed input reaches parser
-
ExecutionImproper input validation triggers crash
-
ImpactApplication denial-of-service
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
|
| Exploitation Conditions | Exploitation requires a victim to actively feed attacker-supplied input to the CAI Content Credentials Rust SDK or command-line tool by visiting a maliciously crafted URL or interacting with a compromised web page (UI:R). The AV:L vector indicates the malformed C2PA asset is processed locally by the tool rather than over a remote network service. Limiting factors: mandatory user interaction, local processing context, and impact restricted to an application crash - no code execution, data disclosure, or integrity modification is possible. |
| Impact | This is a genuine but low-priority issue. The vendor CVSS of 5.5 (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) correctly caps impact at availability-only - the sole consequence is an application crash (denial-of-service), with no confidentiality (C:N) or integrity (I:N) exposure. Notably the vector uses AV:L (local) even though the description references visiting 'a maliciously crafted URL' or a compromised web page; this is consistent with the SDK/CLI parsing an attacker-supplied asset locally rather than a network-listening service, but it is a mild tension worth verifying with Adobe. Exploitation is further gated by required user interaction (UI:R). There is no EPSS score, no CISA KEV listing, and no public exploit code referenced - only the single Adobe advisory APSB26-147. Weighing all signals: low real-world risk. A crash-only DoS in a niche content-provenance developer library, requiring victim interaction and yielding no code execution or data loss, is not an urgent patch priority despite the medium CVSS. |
| Exploit ScenarioDerived | An attacker crafts a malformed Content Credentials (C2PA) asset and lures a victim into visiting a malicious URL or a compromised page that feeds the asset to the CAI Content Credentials Rust SDK or command-line tool. When the tool parses the malformed input, improper input validation triggers an unhandled condition that crashes the application, producing a denial-of-service. No public proof-of-concept exploit is identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 22, 2026
Processing a maliciously crafted C2PA / Content Credentials asset through the CAI (Content Authenticity Initiative) Content Credentials Rust SDK or its companion command-line tool causes improper input validation (CWE-20) that terminates the application, resulting in an application-level denial of service. The flaw carries a CVSS 3.1 base score of 5.5 (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H), meaning exploitation is unauthenticated but requires the victim to actively load attacker-supplied input - for example by opening a malformed C2PA file, visiting a crafted URL, or interacting with a compromised web page that feeds the SDK. Per the independent assessment this is a genuine but low-priority issue: only a crash is achievable (no code execution, data disclosure, or integrity modification), and no public exploit code has been identified, with the issue not listed in CISA KEV. EPSS scoring was not provided in the available intelligence.
RemediationAI
Adopt the fixed release referenced in Adobe's advisory APSB26-147 (https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-147.html) for the CAI Content Credentials Rust SDK, any application embedding it, and the Content Credentials command-line tool; because the supplied data does not include exact fix version numbers, the advisory's affected-versions table is the authoritative source and should be consulted before pinning a version. Until an upgrade can be deployed, the realistic compensating controls target the mandatory user interaction and the local processing context: do not open, verify, or drag-and-drop C2PA assets from untrusted or unsolicited sources (costs users the ability to inspect third-party provenance data); run the CLI or SDK-backed verification in a sandboxed or containerized process with CPU/memory limits and restart-on-exit supervision so a crash degrades only the isolated worker rather than an interactive session (adds orchestration overhead and can break workflows that rely on persistent tool state); and, for hosted services that invoke the SDK on user-supplied content, queue verifications off the request path in throwaway processes with per-request timeouts so a crafted manifest cannot take down the primary application (introduces queue latency and requires error-handling changes). Because the impact is limited to availability and depends on user-supplied input, these controls reduce exposure without introducing confidentiality or integrity risk.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Content Credentials are the C2PA-standard provenance manifests embedded in or attached to media files, and Adobe maintains both a Rust SDK and a command-line tool under the Content Authenticity Initiative to parse, verify, and display them. The root cause is Improper Input Validation (CWE-20): the SDK/CLI processing path does not adequately validate the structure or field contents of an attacker-supplied C2PA manifest / asset, so malformed input reaches code that terminates the process, producing a panic-style crash rather than a memory-safety fault. Because the vulnerable code operates as a local parser or CLI invocation - the CPE entries confirm the affected components are adobe:content_credentials_rust_sdk and adobe:content_credentials_command-line_tool - the attack is modeled as AV:L rather than a network service: the attacker must get a crafted asset or URL in front of the user, and the tool then processes it on the victim's own machine (UI:R, PR:N). The impact is bounded to availability (C:N/I:N/A:H), with confidentiality and integrity entirely unaffected.
Know when Content Credentials Rust Sdk gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Local parse of attacker-supplied asset requiring victim interaction (AV:L/UI:R), no auth (PR:N), crash-only so C:N/I:N/A:H; matches vendor 5.5.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in Content Credentials Rust Sdk
View allDenial of service in Adobe Content Credentials - the Content Authenticity Initiative (CAI) Rust SDK (c2pa-rs) and its as
Improper input validation in Adobe's Content Credentials Rust SDK and its companion command-line tool lets unauthenticat
Improper input validation in Adobe's CAI Content Credentials tooling - spanning both the C2PA Tool and the Content Crede
Integer underflow in Adobe's Content Credentials Rust SDK and C2PA Tool allows unauthenticated remote attackers to crash
Uncontrolled resource consumption in Adobe's Content Credentials ecosystem - specifically the c2pa_tool and Content Cred
Improper input validation in Adobe CAI Content Credentials (the Rust SDK and the command-line tool) lets remote, unauthe
Integer underflow (CWE-191) in Adobe's Content Credentials Rust SDK and C2PA Tool crashes the application when processin
Integer underflow in Adobe's Content Credentials Rust SDK and c2pa_tool allows a local attacker to crash the application
Integer overflow in Adobe's CAI Content Credentials Rust SDK and Content Credentials command-line tool crashes applicati
Arbitrary file system read in Adobe's Content Credentials (C2PA Tool and Content Credentials Rust SDK) exposes sensitive
Improper input validation in Adobe Content Credentials - covering both the Content Credentials Rust SDK and the Content
Improper input validation in Adobe Content Credentials - specifically the Content Credentials Rust SDK and its companion
Exploit-DB