7.5

CVE-2026-100137

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerAdobe
≫
Produkt Content Credentials Rust SDK
Default Statusunaffected
Version <= c2pa-v0.90.15
Version 0
Status affected
Version c2pa-v0.91.1
Status unaffected
HerstellerAdobe
≫
Produkt C2PA Tool
Default Statusunaffected
Version <= c2patool-v0.27.15
Version 0
Status affected
Version v0.28.1
Status unaffected
HerstellerAdobe
≫
Produkt Content Credentials JS SDK
Default Statusunaffected
Version <= @contentauth/c2pa-web@0.13.4
Version 0
Status affected
Version @contentauth/c2pa-web@0.15.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.421
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Adobe 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html