CVE-2026-107446

Published 8 October 2026 · tracked since 8 October 2026

Description

containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-107573 HIGH 7.8
• CVE-2026-107275 MEDIUM 6.8
• CVE-2026-93509 MEDIUM 6.5
• CVE-2026-104660 HIGH 7.8
• CVE-2026-104671 MEDIUM 5.3
• CVE-2026-105190 MEDIUM 5.3
• CVE-2026-103649 HIGH 7.5
• CVE-2026-103010 HIGH 7.8
• CVE-2026-103011 MEDIUM 6.5
• CVE-2026-103517 MEDIUM 5.3

→ Open the live CVE board · all tools