CVE-2026-71443: Improper Input Validation (CWE-20) in Adobe C2PA Tool

The vulnerability identified as CVE-2026-71443 affects Adobe's C2PA Tool, specifically the CAI Content Credentials component. It is caused by improper input validation (CWE-20), which allows an attacker to trigger an application crash leading to denial-of-service. The CVSS 3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial-of-service). There is no vendor advisory or patch information available at this time.

Successful exploitation results in denial-of-service by crashing the Adobe C2PA Tool application. There is no impact on confidentiality or integrity reported. The vulnerability can be exploited remotely without any user interaction or privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting exposure of the affected application to untrusted networks and monitor for unusual crashes or service interruptions.