The vulnerability in Adobe CAI Content Credentials is an uncontrolled resource consumption flaw that can allow an attacker to exhaust system resources and trigger an application denial-of-service. The flaw is a classic DoS weakness, identified as CWE-400, that does not require any user interaction to be triggered.

Adobe CAI Content Credentials versions 0.78.2, 0.7.0 and any earlier releases are affected. Affected deployments include all installations of the Content Authenticity SDK that reference those version strings.

The CVSS score of 6.2 indicates a moderate severity. Because no EPSS score is available, the likelihood of exploitation remains uncertain, but the flaw can be triggered simply by sending resource-intensive requests from the network and does not require privileged access. The vulnerability is not listed in the CISA KEV catalog, but its moderate CVSS and the lack of a defensive patch in current releases suggest that organizations should treat it with priority and avoid exposure while a fix is forthcoming.