CVE-2026-107446
containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlayb…
Published: 2026-10-08 · CVSS: 6.8 · CVSS 3.1
containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7