CVE-2026-34711 describes an integer overflow or wraparound vulnerability in Adobe CAI Content Credentials, specifically affecting versions c2pa-web@0.7.1, c2pa-v0.80.1, and earlier. The vulnerability allows an attacker to cause the application to crash remotely without requiring any user interaction, resulting in a denial-of-service condition. The CVSS 3.1 vector indicates the attack can be performed over the network with low complexity and no privileges or user interaction needed. There is no current information on an available patch or official fix from Adobe.

Successful exploitation leads to a denial-of-service condition by crashing the affected application. There is no reported impact on confidentiality or integrity. The vulnerability can be triggered remotely without authentication or user interaction, increasing its potential risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting exposure of the affected components to untrusted networks and monitor for unusual application crashes.