Adobe Content Credentials Integer Overflow Vulnerability Leading to Application Denial-of-Service

An integer overflow vulnerability has been identified in Adobe Content Credentials, specifically in the Content Credentials Rust SDK, Command-Line Tool, and JS SDK, all prior to the latest versions. This vulnerability can be exploited to cause an application denial-of-service, where the application crashes and becomes unavailable. Notably, exploitation does not require user interaction.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition where the application becomes unavailable.

Remediation

Users are advised to update to the latest versions of the affected SDKs. The updated versions are: Content Credentials Rust SDK (c2pa-v0.85.2), Content Credentials Command-Line Tool (c2patool-v0.26.65), and Content Credentials JS SDK (@contentauth/c2pa-web@0.9.0).