Adobe Content Authenticity SDK Improper Input Validation Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Adobe Content Credentials versions 0.78.2, 0.7.0 and earlier. This issue arises from improper input validation, allowing an attacker to crash the application and create a denial-of-service condition. Notably, exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition.

Remediation

Users are advised to update to the latest version of the Adobe Content Authenticity JS SDK or Rust SDK. The updated version for the JS SDK is 0.7.1, and for the Rust SDK, it is 0.80.1.