CVE-2026-34712 affects Adobe CAI Content Credentials versions [email protected], c2pa-v0.80.1, and earlier. The vulnerability is due to improper input validation, which can be exploited remotely without user interaction to cause the application to crash, leading to denial of service. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service). There is no vendor advisory or patch available at this time.

Successful exploitation results in a denial-of-service condition by crashing the affected application. There is no impact on confidentiality or integrity reported. The attack can be performed remotely without any user interaction or privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to the vulnerable components or monitoring for abnormal application crashes as a temporary measure.