Integer Overflow Vulnerability in overlaybd Container Storage by containerd

CVE-2026-107446

What is CVE-2026-107446?

The overlaybd component of containerd version 1.0.18 presents a vulnerability involving integer overflow during the loading of LSMT indexes. When untrusted overlaybd blobs from a registry are utilized across multiple overlaybd-backed containers, the vulnerability allows for out-of-bounds heap access. This could potentially lead to unauthorized access or manipulation of sensitive data, posing a significant security risk to users leveraging this container storage solution.

References