CVE Catalog

CVE-2026-34711

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.43%

36th percentile - higher than 36% of all known CVEs

Summary

CAI Content Credentials (versions [email protected], c2pa-v0.80.1 and earlier) is vulnerable to integer overflow. An attacker can exploit this to crash the application, leading to denial of service (DoS). Exploitation does not require user interaction.

Risk Assessment

An attacker can remotely crash the application, leading to service disruption.

Recommendation

Update CAI Content Credentials to a patched version.

Other vulnerabilities in CAI Content Credentials

See all
Original NVD description (English source)

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS