CVE-2026-48354

CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)

View on CVE.org
Published Jul 14, 2026 CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Description
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

Analysis

AI-generated

Technical impact

Adobe’s CAI Content Credentials contains an Integer Overflow or Wraparound flaw (CWE‑190) that can allow an attacker to crash the application, resulting in a denial‑of‑service condition without requiring any user interaction.

Affected Systems

The vulnerability affects Adobe Content Credentials Command‑Line Tool, Adobe Content Credentials JS SDK, and Adobe Content Credentials Rust SDK.

Risk and Exploitability

The CVSS score of 6.2 indicates moderate severity, while the EPSS score of less than 1% suggests a very low likelihood of exploitation. It is not listed in CISA KEV, so there is no evidence of widespread active exploitation. The likely attack vector is via malformed or crafted input that triggers the integer wraparound; this inference comes from the description stating that exploitation does not require user interaction.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑supplied patch or update released by Adobe for the affected Content Credentials components.
  • Implement input validation to reject or sanitize numeric values that could cause overflow as a temporary countermeasure.
  • Monitor application logs for abrupt termination or crash events and alert on possible denial‑of‑service attempts.

Generated by OpenCVE AI on July 31, 2026 at 04:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Adobe
Adobe content Credentials Command-line Tool
Adobe content Credentials Js Sdk
Adobe content Credentials Rust Sdk
Vendors & Products Adobe
Adobe content Credentials Command-line Tool
Adobe content Credentials Js Sdk
Adobe content Credentials Rust Sdk
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Title CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
Weaknesses CWE-190
References
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}
Weaknesses
  • CWE-190

    Integer Overflow or Wraparound

Sources

Status
PUBLISHED
Assigner
adobe
Published
Updated
Aug 27, 2026, 10:38 PM
Reserved
May 21, 2026, 3:28 PM

View source JSON

Updated
Jul 14, 2026, 11:34 PM

JSON

Status
Analyzed
Published
Jul 14, 2026, 10:17 PM
Modified
Aug 28, 2026, 12:17 AM

View source JSON

No data.

Updated
Aug 2, 2026, 8:36 PM

JSON