PT-2026-40410 · Unknown · Cai Content Credentials

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-34672

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CAI Content Credentials versions 0.7.0 through 0.78.2

Description An Integer Underflow (Wrap or Wraparound) issue exists, which occurs when an arithmetic operation results in a value smaller than the minimum representable value for that data type. This can be exploited to crash the application, leading to a denial-of-service condition, and does not require user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

BDU:2026-06887

CVE-2026-34672

Affected Products

Cai Content Credentials

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-34672 · Security Note
• https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-53.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06887 · Security Note
• https://twitter.com/CVEnew/status/2054324027095962057 · Twitter Post