Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-71444: Adobe C2PA tool / Content Credentials SDK may crash

CVE-2026-71444 · published 2 months ago

Summary

The Adobe C2PA tool and the Content Credentials Rust SDK contain a coding mistake that can cause a number to wrap around, leading the program to stop working. An attacker can trigger this without any user interaction, causing the application to become unavailable. Update to the latest released versions or apply the vendor's patch to stop the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
adobe	c2pa tool	<= c2patool-v0.26.70
adobe	content credentials rust sdk	<= c2pa-v0.89.0

Original advisory text

CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

References

https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-110.ht... Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71444... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-71444 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

6.2 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-191Integer Underflow (Wrap or Wraparound)

Timeline

Published25 Aug 2026

Updated4 Nov 2026

First seen25 Aug 2026

Sources

CVE-2026-71444 · NVD

CVE-2026-71444 · MITRE

CVE-2026-71444 · OSV

Track software like this

Free during beta