Adobe Content Credentials Improper Input Validation Vulnerability Leading to Application Denial-of-Service

A denial-of-service vulnerability has been identified in Adobe Content Credentials, specifically in the Content Credentials Rust SDK, Command-Line Tool, and JS SDK, all prior to the latest versions. This vulnerability arises from improper input validation, allowing an attacker to crash the application and create a denial-of-service condition. Notably, exploitation of this issue does not require user interaction.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition.

Remediation

Users are advised to update to the latest versions of the affected SDKs. The updated versions are: Content Credentials Rust SDK (c2pa-v0.85.2), Content Credentials Command-Line Tool (c2patool-v0.26.65), and Content Credentials JS SDK (@contentauth/c2pa-web@0.9.0).