6.2

CVE-2026-48298

CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AdobeC2pa SwPlatformrust Version <= 0.84.0
   AppleiPhone OS Version-
   ApplemacOS Version-
   GoogleAndroid Version-
   LinuxLinux Kernel Version-
   MicrosoftWindows Version-
AdobeC2pa-web SwPlatformnode.js Version <= 0.7.0
   AppleiPhone OS Version-
   ApplemacOS Version-
   GoogleAndroid Version-
   LinuxLinux Kernel Version-
   MicrosoftWindows Version-
AdobeC2patool Version <= 0.17.0
   AppleiPhone OS Version-
   ApplemacOS Version-
   GoogleAndroid Version-
   LinuxLinux Kernel Version-
   MicrosoftWindows Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.049
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Adobe 6.2 2.5 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-191 Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html
Vendor Advisory