CVE-2026-34680

🔶 medium

Summary

CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

CVSS Score

6.2

Medium

EPSS Score

0.0

Exploit Probability

Published Date

2026-05-12

First Seen: 2026-05-17

📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 39.4% of all 321,566 vulnerabilities in our database.

#194,936

Below average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: May 12, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

YES

Can be exploited automatically

💥 Technical Impact

Partial

Limited system impact

SSVC data provided by CISA

Last Modified 2026-05-15

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE IDs (Weakness Types)

CWE-190

📦 Affected Products 2

Vendor	Product	Status	Affected Versions
adobe	c2pa	Affected	< 0.80.1
adobe	c2pa-web	Affected	< 0.7.1

🔗 References 1

https://helpx.adobe.com/security/products/content-au...

Vendor Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	Summary	Published
CVE-2026-34665	⚠️ high	7.5	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Uncontrolled Resource Consumption vulnerab...	2026-05-12
CVE-2026-34666	🔶 medium	6.2	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability th...	2026-05-12
CVE-2026-34667	🔶 medium	6.2	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vul...	2026-05-12
CVE-2026-34668	🔶 medium	6.2	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability th...	2026-05-12
CVE-2026-34669	🔶 medium	6.2	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability th...	2026-05-12
CVE-2026-34670	🔶 medium	6.2	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability th...	2026-05-12

These CVEs affect the same products