The vulnerability is an integer overflow or wraparound in Adobe CAI Content Credentials that can trigger an application crash, resulting in a denial‑of‑service condition. The attack does not require user interaction and can be launched solely by sending crafted data to the vulnerable component.

Adobe CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected. All deployments of these or older releases should be considered at risk.

The CVSS score of 7.5 reflects a moderate‑to‑high severity of the denial‑of‑service impact. The EPSS score is not available, indicating that exploitation probability is presently uncertain, but the vulnerability is not listed in the CISA KEV catalog. An attacker can exploit the issue remotely by supplying malformed input to the content credentials service, causing an integer overflow and immediate crash without needing any user action.