Threat Intelligence Database

An Uncontrolled Resource Consumption vulnerability (CWE-400) affects Adobe CAI Content Credentials versions c2pa-web up to 0.7.1 and c2pa up to 0.80.1. This flaw allows an attacker to exhaust system resources without requiring user interaction, potentially causing an application denial-of-service. The vulnerability has a medium severity rating with a CVSS score of 6.2. No official patch or remediation guidance is currently available from the vendor.

An Uncontrolled Resource Consumption vulnerability (CWE-400) exists in Adobe CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier. This flaw allows an attacker to exhaust system resources without requiring user interaction, potentially causing an application denial-of-service condition. The vulnerability has a medium severity rating with a CVSS score of 6.2. No official patch or remediation guidance is currently provided by the vendor.

An Improper Input Validation vulnerability (CWE-20) exists in Adobe CAI Content Credentials versions up to 0.7.1 and 0.80.1. This flaw can be exploited by an attacker without user interaction to crash the application, causing a denial-of-service (DoS) condition. The vulnerability has a CVSS score of 6.2, indicating medium severity. No official patch or remediation guidance is currently available from the vendor.

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

An Uncontrolled Resource Consumption vulnerability (CWE-400) exists in Adobe CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier. This flaw allows an attacker to exhaust system resources, causing an application denial-of-service (DoS) without requiring user interaction. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation guidance has been provided yet.

An Improper Input Validation vulnerability (CWE-20) exists in Adobe CAI Content Credentials versions up to 0.7.1 and 0.80.1. This flaw allows an attacker to crash the application without requiring user interaction, resulting in a denial-of-service condition. The vulnerability has a high severity with a CVSS score of 7.5. No official patch or remediation guidance is currently provided by the vendor.

An Integer Overflow or Wraparound vulnerability (CWE-190) exists in Adobe CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier. This flaw can be exploited remotely without user interaction to cause the application to crash, resulting in a denial-of-service condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation guidance is currently provided by the vendor.

Adobe CAI Content Credentials versions up to 0.7.1 and 0.80.1 are affected by a path traversal vulnerability (CWE-22) that allows an attacker to write files outside of intended directories. Exploitation requires user interaction through extraction of a maliciously crafted file. The vulnerability has a medium severity with a CVSS score of 5.5.