CVE Catalog

CVE-2026-47902

MediumCVSS 6.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Uncontrolled resource consumption vulnerability in CAI Content Credentials library ([email protected], c2pa-v0.80.1 and earlier). An attacker can exhaust system resources, causing a denial of service (DoS). Exploitation does not require user interaction.

Risk Assessment

The risk is the potential for remote system overload, leading to application unavailability for users.

Recommendation

It is recommended to update the CAI Content Credentials library to the latest patched version.

Other vulnerabilities in CAI Content Credentials

See all
Original NVD description (English source)

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS