The vulnerability is an Improper Input Validation flaw, identified as CWE‑20, that allows an attacker to supply malformed data to the CAI Content Credentials component, causing the application to crash. The crash results in a denial-of-service condition, denying legitimate users access to the service. No user interaction is required to trigger the failure.

Adobe CAI Content Credentials products are affected, specifically version 0.78.2, 0.7.0 and earlier. These builds, when installed, are susceptible to the input validation issue.

The CVSS score of 6.2 indicates a moderate severity. The EPSS score is not available, so the likelihood of exploitation is not quantified, but the flaw can be abused without user interaction, suggesting a remote or network‑based attack path. The vulnerability is not listed in the CISA KEV catalog, reducing evidence of widespread exploitation yet the risk remains significant due to the inherent denial‑of‑service effect.