CVE-2026-16254

Name of the Vulnerable Software and Affected Versions claircore (affected versions not specified) Red Hat Advanced Cluster Security 4 (affected versions not specified)

Description A flaw in the apk package scanner allows an out-of-bounds access when processing malformed package-database data in a container layer. This can cause the scanner to panic, which may lead to a crash of the Clair indexer process and result in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.