7.5Alta
CVE-2026-100137CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
Descripción
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Debilidad (CWE):
CWE-400
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| adobe | c2pa | < 0.91.1 | |
| Adobe | C2PA Tool | ≤ c2patool-v0.27.15, fixed v0.28.1 | |
| adobe | c2pa-web | < 0.15.3 | |
| adobe | c2patool | < 0.28.1 | |
| Adobe | Content Credentials JS SDK | ≤ @contentauth/c2pa-web@0.13.4, fixed @contentauth/c2pa-web@0.15.3 | |
| Adobe | Content Credentials Rust SDK | ≤ c2pa-v0.90.15, fixed c2pa-v0.91.1 |
Referencias y parches
- https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (3)
cpe:2.3:a:adobe:c2pa:*:*:*:*:*:rust:*:*< 0.91.1cpe:2.3:a:adobe:c2pa-web:*:*:*:*:*:node.js:*:*< 0.15.3cpe:2.3:a:adobe:c2patool:*:*:*:*:*:*:*:*< 0.28.1