Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-71443: Adobe C2PA tool and Content Credentials SDK can be crashed

CVE-2026-71443 · published 2 months ago

Summary

The Adobe C2PA tool and the Adobe Content Credentials Rust SDK may stop working if they receive unexpected data. An attacker can send specially crafted input that forces the application to stop responding, causing a denial of service without needing any user interaction. Update to the latest versions or apply the vendor’s patches to prevent the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
adobe	c2pa tool	<= c2patool-v0.26.70
adobe	content credentials rust sdk	<= c2pa-v0.89.0

Original advisory text

CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

References

https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-110.ht... Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71443... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-71443 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

7.5 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-20Improper Input Validation

Timeline

Published25 Aug 2026

Updated3 Nov 2026

First seen25 Aug 2026

Sources

CVE-2026-71443 · NVD

CVE-2026-71443 · MITRE

CVE-2026-71443 · OSV

Track software like this

Free during beta