CVE-2026-89277Medium· 5.5▾ SunlitCAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-s…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 23.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Last analysed / modified upstream
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
c2pa < 0.90.17c2patool < 0.27.17Upgrade past the affected range:
c2pa 0.90.17c2patool 0.27.17Connected by shared product, vendor, weakness, or advisory.
CVE-2026-100136High· 7.5CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service
CVE-2026-19480High· 7.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass
CVE-2026-75633Medium· 5.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service
CVE-2026-75638Medium· 6.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass
CVE-2026-76194Medium· 4.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass
CVE-2026-75632High· 7.5CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service