CAI Content Credentials vulnerabilities

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation does not require user interaction.

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation does not require user interaction.

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

CAI Content Credentials is affected by a Path Traversal vulnerability that could lead to arbitrary file system read. An attacker could exploit this to access sensitive files and directories outside the intended scope. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised web page.

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this to crash the application. Exploitation does not require user interaction.

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this to crash the application. Exploitation does not require user interaction.

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this to exhaust system resources, causing application unavailability. Exploitation does not require user interaction.

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to gain unauthorized read access to files or directories outside the intended restrictions. Exploitation does not require user interaction. Scope is changed.

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation does not require user interaction.

CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation does not require user interaction.

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a security feature bypass. An attacker could leverage this to bypass security measures and gain unauthorized write access. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised web page.

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a security feature bypass. An attacker could leverage this to bypass security measures and gain unauthorized write access. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised web page.

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this to crash the application. Exploitation does not require user interaction.

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this to exhaust system resources, causing application unavailability. Exploitation does not require user interaction.

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this to crash the application. Exploitation does not require user interaction.

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation requires user interaction – the victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources without user interaction.

An Integer Overflow or Wraparound vulnerability in CAI Content Credentials could lead to a denial-of-service (DoS) condition. An attacker can exploit this flaw to crash the application without user interaction.

An Improper Input Validation vulnerability in CAI Content Credentials could lead to arbitrary file system read. An attacker can exploit this to access sensitive files and directories outside the intended scope. Exploitation requires user interaction, as a victim must open a malicious file.

The vulnerability in CAI Content Credentials is caused by improper input validation, which could lead to a denial-of-service (DoS) condition. An attacker can exploit this flaw remotely without user interaction, causing the application to crash.

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application without user interaction.

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access without user interaction.

An Improper Input Validation vulnerability in CAI Content Credentials could lead to a denial-of-service (DoS) condition. An attacker can exploit this flaw remotely without user interaction, causing the application to crash.

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

An Integer Underflow (Wrap or Wraparound) vulnerability in CAI Content Credentials could result in a denial-of-service (DoS) condition. An attacker can exploit this flaw to crash the application without user interaction.

CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to gain unauthorized read access without user interaction.

An SSRF vulnerability in CAI Content Credentials could lead to arbitrary code execution in the context of the current user. An attacker can inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account. User interaction is required (visiting a crafted URL or interacting with a compromised page).

An Untrusted Search Path vulnerability in CAI Content Credentials could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised web page. The scope of the vulnerability is changed.

CAI Content Credentials libraries ([email protected], c2pa-v0.80.1 and earlier) are vulnerable to uncontrolled resource consumption. An attacker can exhaust system resources, causing application denial of service without user interaction.

Uncontrolled resource consumption vulnerability in CAI Content Credentials library ([email protected], c2pa-v0.80.1 and earlier). An attacker can exhaust system resources, causing a denial of service (DoS). Exploitation does not require user interaction.

Improper input validation vulnerability in CAI Content Credentials library ([email protected], c2pa-v0.80.1 and earlier). An attacker can crash the application, leading to a denial of service (DoS). Exploitation does not require user interaction.

Uncontrolled resource consumption vulnerability in CAI Content Credentials library ([email protected], c2pa-v0.80.1 and earlier). An attacker can exhaust system resources, causing a denial of service (DoS). Exploitation does not require user interaction.

Uncontrolled resource consumption vulnerability in CAI Content Credentials library (c2pa-web and c2pa). An attacker can exhaust system resources, causing a denial-of-service (DoS) condition. User interaction is not required for exploitation.

Improper input validation vulnerability in CAI Content Credentials library (c2pa-web and c2pa). An attacker can crash the application, causing a denial-of-service (DoS) condition. User interaction is not required for exploitation.

CAI Content Credentials (versions [email protected], c2pa-v0.80.1 and earlier) is vulnerable to integer overflow. An attacker can exploit this to crash the application, leading to denial of service (DoS). Exploitation does not require user interaction.

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by a Path Traversal vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended restrictions. Exploitation requires user interaction in that a victim must extract a maliciously crafted file.

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition.

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition.

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application.

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition.

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition.

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application.

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition without user interaction.

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition.

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition.