Adobe Cai Content Credentials vulnerabilities

CVE-2026-34665 [HIGH] CWE-400 CVE-2026-34665: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontr CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does

CVE-2026-34713 [HIGH] CWE-400 CVE-2026-34713: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontr CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

CVE-2026-34712 [HIGH] CWE-20 CVE-2026-34712: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Imprope CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

CVE-2026-34711 [HIGH] CWE-190 CVE-2026-34711: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Integer CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

CVE-2026-34657 [MEDIUM] CWE-22 CVE-2026-34657: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Imprope CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended r

CVE-2026-34680 [MEDIUM] CWE-190 CVE-2026-34680: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require u

CVE-2026-34672 [MEDIUM] CWE-191 CVE-2026-34672: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not r

CVE-2026-34670 [MEDIUM] CWE-20 CVE-2026-34670: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in

CVE-2026-34688 [MEDIUM] CWE-20 CVE-2026-34688: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in

CVE-2026-34666 [MEDIUM] CWE-20 CVE-2026-34666: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in

CVE-2026-34667 [MEDIUM] CWE-191 CVE-2026-34667: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not r

CVE-2026-34671 [MEDIUM] CWE-190 CVE-2026-34671: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require u

CVE-2026-47903 [MEDIUM] CWE-20 CVE-2026-47903: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Imprope CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

CVE-2026-47904 [MEDIUM] CWE-400 CVE-2026-47904: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontr CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

CVE-2026-47902 [MEDIUM] CWE-400 CVE-2026-47902: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontr CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

CVE-2026-47905 [MEDIUM] CWE-400 CVE-2026-47905: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontr CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

CVE-2026-34678 [MEDIUM] CWE-400 CVE-2026-34678: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontr CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue do

CVE-2026-34669 [MEDIUM] CWE-20 CVE-2026-34669: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in

CVE-2026-34668 [MEDIUM] CWE-20 CVE-2026-34668: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in

CVE-2026-34679 [MEDIUM] CWE-20 CVE-2026-34679: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in