Description
CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Adobe Content Credentials JS SDK
Default version status: unaffected
0 to ≤ @contentauth/c2pa-web@0.7.0affected@contentauth/c2pa-web@0.7.1unaffected
Adobe Content Credentials Rust SDK
Default version status: unaffected
0 to ≤ c2pa-v0.78.2affectedc2pa-v0.80.1unaffected