A maliciously crafted image can cause a Denial of Service (DoS) condition. When a container is created from such an image, memory exhaustion occurs, resulting in an Out Of Memory (OOM) kill of the containerd process. This action makes the container runtime API unavailable and can disrupt clients, including the Docker Engine or Kubernetes control-plane components.