6.2

CVE-2026-48302

CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AdobeC2pa SwPlatformrust Version <= 0.84.0
   AppleiPhone OS Version-
   ApplemacOS Version-
   GoogleAndroid Version-
   LinuxLinux Kernel Version-
   MicrosoftWindows Version-
AdobeC2pa-web SwPlatformnode.js Version <= 0.7.0
   AppleiPhone OS Version-
   ApplemacOS Version-
   GoogleAndroid Version-
   LinuxLinux Kernel Version-
   MicrosoftWindows Version-
AdobeC2patool Version <= 0.17.0
   AppleiPhone OS Version-
   ApplemacOS Version-
   GoogleAndroid Version-
   LinuxLinux Kernel Version-
   MicrosoftWindows Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.05
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Adobe 6.2 2.5 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html
Vendor Advisory