Description
CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Adobe Content Credentials JS SDK
Default version status: unaffected
0 to ≤ @contentauth/c2pa-web@0.7.0affected@contentauth/c2pa-web@0.7.1unaffected
Adobe Content Credentials Rust SDK
Default version status: unaffected
0 to ≤ c2pa-v0.78.2affectedc2pa-v0.80.1unaffected