An integer overflow or wraparound flaw discovered in CAI Content Credentials versions 0.78.2, 0.7.0 and earlier can cause the application to crash, leading to a denial‑of‑service. The flaw arises when unvalidated numeric values cause an overflow. Exploiting the flaw does not require user interaction, so any external input that reaches the vulnerable code could trigger it.

Adobe CAI Content Credentials releases 0.78.2, 0.7.0 and all earlier builds. Any environment running these affected versions is vulnerable; later releases are not mentioned as affected.

The CVSS score of 6.2 indicates moderate severity. Because the flaw can be triggered without user interaction, an attacker could potentially disrupt services by sending crafted requests. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, suggesting that active exploitation may be limited but still poses a risk of service disruption.