Adobe CAI Content Credentials versions 0.78.2 0.7.0 and earlier are vulnerable to Improper Input Validation, which can be used by an attacker to crash the application, resulting in a denial-of-service condition. The flaw is a classic input validation error (CWE-20) and does not compromise confidentiality or integrity, but it disrupts availability for legitimate users.

The affected product is Adobe CAI Content Credentials. Versions up to and including 0.78.2, 0.7.0 and earlier are impacted; any installation running one of those releases is at risk.

The CVSS score of 6.2 indicates moderate severity. The exploit does not require user interaction, and the EPSS score is not provided, but the vulnerability can be triggered remotely by sending malformed input to the component. The vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploits at the time of this advisory. However, the lack of user interaction requirements makes it a realistic target for automated attacks, so applying the fix is recommended.