An uncontrolled resource consumption flaw can cause the application to become unavailable by exhausting system resources. Based on the description, the flaw corresponds to CWE-400 and does not require user interaction, so an attacker could trigger it remotely or via untrusted data processed by the affected component.

The vulnerability impacts Adobe products, specifically the C2PA Tool, the Content Credentials JavaScript SDK, and the Content Credentials Rust SDK. Version information is not available; we infer that any deployed instance of these components may be susceptible.

The CVSS score of 7.5 indicates high severity, while the EPSS score of less than 1% suggests a low probability of exploitation. The issue is not listed in CISA KEV. Because the flaw does not require user interaction, the likely attack vector is remote exploitation via untrusted content; this inference is drawn from the description. If an attacker supplies crafted content to the SDK or tool, resource exhaustion may be achieved, leading to a denial of service for legitimate users.