Unverified50% confidenceFactExact time
DoS is usually not regarded as a high-severity vulnerability (CVSS scores are often lower than RCE).
1
Sources
50%
Confidence
Long-term
Relevance
10/29/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThere is a time lag between CVE identifier assignment, NVD enrichment (CVSS scoring, CPE matching), and vendor advisories, so directly consuming raw CVE entries may yield data lacking impact-scope descriptions.66% similarUnverifiedSecurity researchers analyzing the issue believe that the C2PA range-not-verified flaw is not an implementation oversight in some library, but a consequence of the protocol design underestimating the signature coverage range metadata.60% similarUnverifiedVulnerability reports lacking reproducible evidence (including a PoC, a clearly defined range of affected versions, and independently verifiable technical details) should not be assigned an official CVE number.58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1112235API
curl https://kongchang.com/api/v1/knowledge/claims/1112235MCP
get_claim(id=1112235)