Adobe Content Authenticity SDK Integer Overflow Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Adobe Content Credentials versions 0.78.2, 0.7.0 and earlier. This issue arises from an integer overflow or wraparound, which an attacker could exploit to crash the application, causing a denial-of-service condition. Notably, exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability can cause the application to crash, leading to a denial-of-service condition.

Remediation

Users are advised to update to the latest version of the Adobe Content Authenticity JS SDK or the Adobe Content Authenticity Rust SDK. The updated versions are 0.7.1 for the JS SDK and 0.80.1 for the Rust SDK.