A flaw in Adobe CAI Content Credentials allows an attacker to trigger an integer overflow or wraparound, causing the application to crash. The crash leads to a denial-of-service condition, preventing legitimate users from accessing the service. The attack does not require any user interaction, meaning the vulnerability can be exercised automatically by sending crafted input to the software.

Adobe CAI Content Credentials versions 0.78.2, 0.7.0 and all earlier releases are affected. Systems running these versions of the SDK are vulnerable until updated to a version that includes the fix.

The CVSS score is 6.2, indicating moderate severity. No EPSS data is available and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the vulnerability can be exploited without user interaction, implying that an attacker could trigger the overflow by sending a malicious input to the application, potentially from a remote source. The risk is therefore moderate but could disrupt service availability if a targeted or automated exploit is deployed.