.

Adobe Security Bulletin

Last updated on May 12, 2026

Security updates available for Content Authenticity SDK | APSB26-53

Bulletin ID
Date published
Priority
APSB26-53
May 12, 2026
3

Summary

Adobe has released security updates for Content Authenticity SDK. This update addresses critical and important vulnerability that could result in application denial-of-service.

Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates.

Affected versions

Product
Affected version
Platform
Content Authenticity JS SDK
@contentauth/c2pa-web@0.7.0
Windows, macOS, Linux, iOS, Android
Content Authenticity Rust SDK
c2pa-v0.78.2
Windows, macOS, Linux, iOS, Android

Solution

Adobe categorizes these updates with the following priority rating and recommends users update their installation to the newest version:

Product
Updated version
Platform
Priority rating
Availability
Content Authenticity JS SDK
@contentauth/c2pa-web@0.7.1
Windows, macOS, Linux, iOS, Android
3
Content Authenticity Rust SDK
c2pa-v0.80.1
Windows, macOS, Linux, iOS, Android
3

Vulnerability Details

Acknowledgments

Adobe would like to thank the following researchers for reporting this issue and for working with Adobe to help protect our customers.

  • bau1u - CVE-2026-34665, CVE-2026-34666, CVE-2026-34667, CVE-2026-34668, CVE-2026-34669, CVE-2026-34670, CVE-2026-34671, CVE-2026-34672, CVE-2026-34673, CVE-2026-34677, CVE-2026-34678, CVE-2026-34679, CVE-2026-34680, CVE-2026-34688