CVE-2026-34673

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-34673", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "state": "PUBLISHED", "assignerShortName": "adobe", "dateReserved": "2026-03-30T17:30:36.495Z", "datePublished": "2026-05-12T20:03:53.950Z", "dateUpdated": "2026-08-27T22:24:26.927Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Content Credentials JS SDK", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "@contentauth/c2pa-web@0.7.0", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "@contentauth/c2pa-web@0.7.1", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Content Credentials Rust SDK", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "c2pa-v0.78.2", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "c2pa-v0.80.1", "versionType": "custom"}]}], "datePublic": "2026-05-12T17:00:00.000Z", "descriptions": [{"lang": "en", "value": "CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "environmentalScore": 6.2, "environmentalSeverity": "MEDIUM", "exploitCodeMaturity": "NOT_DEFINED", "integrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "LOW", "modifiedAttackVector": "LOCAL", "modifiedAvailabilityImpact": "HIGH", "modifiedConfidentialityImpact": "NONE", "modifiedIntegrityImpact": "NONE", "modifiedPrivilegesRequired": "NONE", "modifiedScope": "UNCHANGED", "modifiedUserInteraction": "NONE", "privilegesRequired": "NONE", "remediationLevel": "NOT_DEFINED", "reportConfidence": "NOT_DEFINED", "scope": "UNCHANGED", "temporalScore": 6.2, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "Uncontrolled Resource Consumption (CWE-400)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2026-08-27T22:24:26.927Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-53.html"}], "source": {"discovery": "EXTERNAL"}, "title": "CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)", "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-12T20:22:08.969868Z", "id": "CVE-2026-34673", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-12T20:24:04.717Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-34673", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-12T20:22:08.969868Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-12T20:23:58.856Z"}}], "cna": {"title": "CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)", "source": {"discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "modifiedScope": "UNCHANGED", "temporalScore": 6.2, "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "remediationLevel": "NOT_DEFINED", "reportConfidence": "NOT_DEFINED", "temporalSeverity": "MEDIUM", "availabilityImpact": "HIGH", "environmentalScore": 6.2, "privilegesRequired": "NONE", "exploitCodeMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "LOCAL", "confidentialityImpact": "NONE", "environmentalSeverity": "MEDIUM", "availabilityRequirement": "NOT_DEFINED", "modifiedIntegrityImpact": "NONE", "modifiedUserInteraction": "NONE", "modifiedAttackComplexity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAvailabilityImpact": "HIGH", "modifiedPrivilegesRequired": "NONE", "modifiedConfidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Adobe", "product": "Content Credentials JS SDK", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "@contentauth/c2pa-web@0.7.0"}, {"status": "unaffected", "version": "@contentauth/c2pa-web@0.7.1", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Adobe", "product": "Content Credentials Rust SDK", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "c2pa-v0.78.2"}, {"status": "unaffected", "version": "c2pa-v0.80.1", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2026-05-12T17:00:00.000Z", "references": [{"url": "https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-53.html", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "Uncontrolled Resource Consumption (CWE-400)"}]}], "providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2026-08-27T22:24:26.927Z"}}}, "cveMetadata": {"cveId": "CVE-2026-34673", "state": "PUBLISHED", "dateUpdated": "2026-08-27T22:24:26.927Z", "dateReserved": "2026-03-30T17:30:36.495Z", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "datePublished": "2026-05-12T20:03:53.950Z", "assignerShortName": "adobe"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Content Credentials JS SDK", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "@contentauth/c2pa-web@0.7.0", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "@contentauth/c2pa-web@0.7.1", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Content Credentials Rust SDK", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "c2pa-v0.78.2", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "c2pa-v0.80.1", "versionType": "custom"}]}], "source": "psirt@adobe.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:c2pa:*:*:*:*:*:rust:*:*", "matchCriteriaId": "582660A2-9085-4450-AE1C-4ADF5604E636", "versionEndExcluding": "0.80.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:c2pa-web:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "1EF9A61D-7F17-4AF9-B9EF-440D38A11D9F", "versionEndExcluding": "0.7.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction."}, {"lang": "es", "value": "Las versiones 0.78.2, 0.7.0 y anteriores de CAI Content Credentials se ven afectadas por una vulnerabilidad de Consumo de Recursos No Controlado que podr\u00eda conducir a una denegaci\u00f3n de servicio de la aplicaci\u00f3n. Un atacante podr\u00eda explotar esta vulnerabilidad para agotar los recursos del sistema, lo que resultar\u00eda en una condici\u00f3n de denegaci\u00f3n de servicio de la aplicaci\u00f3n. La explotaci\u00f3n de este problema no requiere interacci\u00f3n del usuario."}], "id": "CVE-2026-34673", "lastModified": "2026-10-26T18:10:00.173", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 3.6, "source": "psirt@adobe.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34673", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-12T20:22:08.969868Z", "version": "2.0.3"}}]}, "published": "2026-05-12T20:16:37.920", "references": [{"source": "psirt@adobe.com", "tags": ["Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-53.html"}], "sourceIdentifier": "psirt@adobe.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "psirt@adobe.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.7.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "CAI Content Credentials", "source": "cna", "vendor": "Adobe"}, "product": "cai_content_credentials", "vendor": "adobe"}], "created": "2026-05-12T21:45:05.381233+00:00", "updated": "2026-06-09T23:30:05.506868+00:00", "vendors": ["adobe", "adobe$PRODUCT$cai_content_credentials"]}