7.5Hoch
CVE-2026-100135CAI Content Credentials | Improper Input Validation (CWE-20)
Beschreibung
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Schwachstellentyp (CWE):
CWE-20
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| adobe | c2pa | < 0.91.1 | |
| Adobe | C2PA Tool | ≤ c2patool-v0.27.15, fixed v0.28.1 | |
| adobe | c2pa-web | < 0.15.3 | |
| adobe | c2patool | < 0.28.1 | |
| Adobe | Content Credentials JS SDK | ≤ @contentauth/c2pa-web@0.13.4, fixed @contentauth/c2pa-web@0.15.3 | |
| Adobe | Content Credentials Rust SDK | ≤ c2pa-v0.90.15, fixed c2pa-v0.91.1 |
Referenzen und Patches
- https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (3)
cpe:2.3:a:adobe:c2pa:*:*:*:*:*:rust:*:*< 0.91.1cpe:2.3:a:adobe:c2pa-web:*:*:*:*:*:node.js:*:*< 0.15.3cpe:2.3:a:adobe:c2patool:*:*:*:*:*:*:*:*< 0.28.1