Adobe Content Credentials Uncontrolled Resource Consumption Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Adobe Content Credentials, specifically in the Rust SDK, Command-Line Tool, and JS SDK, all prior to the latest versions. This vulnerability allows an attacker to exhaust system resources, causing an application denial-of-service condition. Exploitation does not require user interaction.

Impact

Exploitation of this vulnerability leads to application denial-of-service, causing the application to become unresponsive or unavailable.

Remediation

Users are advised to update to the latest version of the Adobe Content Credentials SDK. The updated versions are: - Content Credentials Rust SDK: c2pa-v0.85.2 - Content Credentials Command-Line Tool: c2patool-v0.26.65 - Content Credentials JS SDK: @contentauth/c2pa-web@0.9.0