CVEvulnerability

CVE-2026-114236

3.3 LOW Published 2026-10-21 Modified 2026-10-29 Official page ↗
Status
Awaiting Analysis
Published
2026-10-21
Last modified
2026-10-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weaknesses
CWE-772

Description

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

Related

Weakness · CWE (1)

  • CWE-772 Missing Release of Resource after Effective Lifetime weakness

References