Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority MEDIUM 41

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00927 Published 2026-08-25 Fixed in c2patool-v0.27.11, c2pa-v0.90.11 CWE-20
Priority LOW 27

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00259 Published 2026-08-25 Fixed in c2patool-v0.27.11, c2pa-v0.90.11 CWE-191
Priority MEDIUM 41

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00902 Published 2026-08-25 Fixed in c2patool-v0.27.11, c2pa-v0.90.11 CWE-191
Priority LOW 27

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00259 Published 2026-08-25 Fixed in c2patool-v0.27.11, c2pa-v0.90.11 CWE-191
Priority MEDIUM 41

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00902 Published 2026-08-25 Fixed in c2patool-v0.27.11, c2pa-v0.90.11 CWE-400
Priority LOW 24

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00263 Published 2026-08-25 Fixed in c2patool-v0.27.11, c2pa-v0.90.11 CWE-20