Kohei Tokunaga

**Name of the Vulnerable Software and Affected Versions** BuildKit (affected versions not specified) **Description** BuildKit fails to validate that advertised DiffIDs match the actual layer contents of an image. A malicious image can advertise DiffIDs from another image while containing different content. If a BuildKit daemon with shared or persistent cache processes such an image, subsequent builds may mount attacker-controlled layer contents as the base image. This allows the execution of malicious code within the victim build, potentially enabling the attacker to read build secrets, access build resources, alter output artifacts, or cause the build to hang. This issue impacts both regular snapshotters and lazy-pulling snapshotters, such as stargz. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.