CVE Catalog

CVE-2026-47903

MediumCVSS 6.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Improper input validation vulnerability in CAI Content Credentials library ([email protected], c2pa-v0.80.1 and earlier). An attacker can crash the application, leading to a denial of service (DoS). Exploitation does not require user interaction.

Risk Assessment

The risk is the potential for remote application crash, resulting in service unavailability.

Recommendation

It is recommended to update the CAI Content Credentials library to the latest patched version.

Other vulnerabilities in CAI Content Credentials

See all
Original NVD description (English source)

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS