CVE-2026-34670 affects Adobe CAI Content Credentials versions [email protected], c2pa-v0.78.2, and earlier. The vulnerability is due to improper input validation, which allows an attacker to trigger an application crash leading to denial-of-service. The CVSS 3.1 base score is 6.2, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and impact limited to availability (denial-of-service). No patch or official remediation guidance is currently available from the vendor, and no known exploits have been reported in the wild.

Successful exploitation results in an application denial-of-service by crashing the affected software. There is no impact on confidentiality or integrity. The attack requires local access but no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit local access to trusted users and monitor for abnormal application crashes. No official fix or workaround has been published by Adobe at this time.