CVE-2026-62370

KubeEdge is vulnerable to an unbounded memory allocation in the pkg/viaduct/pkg/packer component. The Reader.Read function trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct message-processing path and allocates memory before validating an upper bound. An authenticat...