Adobe Content Credentials Integer Underflow Vulnerability Leading to Application Denial-of-Service

A denial-of-service vulnerability has been identified in Adobe Content Credentials, specifically in the Rust SDK, Command-Line Tool, and JS SDK, all prior to the latest versions. This vulnerability arises from an integer underflow issue that can be exploited to crash the application, causing a denial-of-service condition. Notably, exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition.

Remediation

Users are advised to update to the latest versions of the affected SDKs. The updated versions are: - Content Credentials Rust SDK: c2pa-v0.85.2 - Content Credentials Command-Line Tool: c2patool-v0.26.65 - Content Credentials JS SDK: @contentauth/c2pa-web@0.9.0