Adobe CAI Content Credentials has an Improper Input Validation flaw that could allow an attacker to send crafted input which leads to a crash of the application and a denial‑of‑service. The vulnerability is classified as CWE‑20 and does not provide any other information disclosure or code execution capabilities. It can be exploited without user interaction.

Adobe CAI Content Credentials versions 0.78.2, 0.7.0 and all earlier releases are affected. Systems running these or previous releases must consider upgrading to a version in which the input validation deficiency has been corrected.

The CVSS score of 6.2 indicates a moderate severity. The EPSS score is less than 1%, indicating a low probability of exploitation, although the vulnerability can be exploited without user interaction, suggesting an attacker could trigger the crash remotely. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is inferred to be remote, based on the description that external input is processed and no user action is required.