CVE-2026-107446
MEDIUM
6,8
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: changed
Confidentiality: none
Integrity: none
Availability: high
Description
AI Translation Available
containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers.
190
Integer Overflow or Wraparound
StableCommon Consequences
Security Scopes Affected:
Availability
Integrity
Confidentiality
Access Control
Other
Potential Impacts:
Dos: Crash, Exit, Or Restart
Dos: Resource Consumption (Memory)
Dos: Instability
Modify Memory
Execute Unauthorized Code Or Commands
Bypass Protection Mechanism
Alter Execution Logic
Dos: Resource Consumption (Cpu)
Applicable Platforms
Languages:
Not Language-Specific, C
https://github.com/containerd/overlaybd/blob/58f1508f4c841fe27da428f54d987000f7…
https://github.com/containerd/overlaybd/blob/58f1508f4c841fe27da428f54d987000f7…
https://github.com/containerd/overlaybd/commit/a536e3341c82517268b5ce32375b36fa…
https://github.com/containerd/overlaybd/commit/d80c1790920a17e84da025675530624a…
https://github.com/containerd/overlaybd/pull/438