PT-2026-96167

Name of the Vulnerable Software and Affected Versions KubeEdge versions 1.0.0 through 1.21.1 KubeEdge versions 1.22.0 through 1.22.1 KubeEdge versions 1.23.0 through 1.23.0 Description The Reader.Read function in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received via the...

CVE-2026-62370: Memory Allocation with Excessive Size Value

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...