Product:
CAI Content Credentials
Summary
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-34667 |
Exploitation
To exploit this vulnerability, an attacker can execute a specially crafted input that triggers the Integer Underflow condition within the application. This can lead to unexpected behavior, including application crashes, resulting in a denial-of-service. Since the attack does not require user interaction, it can be executed remotely, making it a significant risk.
Affected Products
- CAI Content Credentials versions 0.78.2 and earlier: Vulnerable to Integer Underflow leading to denial-of-service.
Mitigation
To mitigate this vulnerability, users should update to the latest version of CAI Content Credentials as soon as it becomes available. Additionally, implementing security best practices such as input validation and monitoring application behavior can help reduce the risk of exploitation.