CVEvulnerability
CVE-2026-107446
6.8 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-10-08
- Last modified
- 2026-10-08
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
- Weaknesses
- CWE-190
Description
containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers.
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://github.com/containerd/overlaybd/blob/58f1508f4c841fe27da428f54d987000f7dae4de/src/image_file.cpp github.com
- https://github.com/containerd/overlaybd/blob/58f1508f4c841fe27da428f54d987000f7dae4de/src/overlaybd/lsmt/file.cpp github.com
- https://github.com/containerd/overlaybd/commit/a536e3341c82517268b5ce32375b36faecb1fb40 github.com
- https://github.com/containerd/overlaybd/commit/d80c1790920a17e84da025675530624aee753f1b github.com
- https://github.com/containerd/overlaybd/pull/438 github.com