CVE-2026-48352CWE-20

CVE-2026-48352

High · published July 15, 2026

CVSS v3.1

7.5

EPSS

Percentile

60.1

In the wild

Unconfirmed

What it is

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.00927 · 60.1th percentile
Weakness: CWE-20 · Improper Input Validation
Published: 2026-07-15T02:17Z

Affected products (3)

Product	Versions	Fixed in
adobe/c2pa	≤ 0.84.0	—
adobe/c2pa-web	≤ 0.7.0	—
adobe/c2patool	≤ 0.17.0	—

References (1)

https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html · [email protected]

EPSS history

Timeline

14 JUL 21:32Z
CAI Content Credentials | Improper Input Validation (CWE-20)
cvelistv5