Fluid Attacks Database

Description

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component
rpm rhel10	bootc-image-builder
rpm rhel9	bootc-image-builder
rpm rhel10	buildah
rpm rhel9	buildah
rpm rhel10	oci-seccomp-bpf-hook
rpm rhel9	oci-seccomp-bpf-hook
rpm rhel10	podman
rpm rhel9	podman
rpm rhel10	rhel-10.2-bootc
rpm rhel9	rhel-9.8-bootc

1-10 of 14

Aliases

1. CVE-2026-1142362. NVD-2026-1142363. OSV-2026-114236

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.