openEuler iSulad up to 2.1.6 OCI Image Loader oci_load.c format string

Summaryinfo

A vulnerability classified as very critical has been found in openEuler iSulad up to 2.1.6. This issue affects some unknown processing of the file src/daemon/modules/image/oci/oci_load.c of the component OCI Image Loader. The manipulation leads to format string. This vulnerability is listed as CVE-2026-111434. The attack must be carried out locally. There is no available exploit.

Detailsinfo

A vulnerability was found in openEuler iSulad up to 2.1.6 and classified as very critical. This issue affects some unknown processing of the file src/daemon/modules/image/oci/oci_load.c of the component OCI Image Loader. The manipulation with an unknown input leads to a format string vulnerability. Using CWE to declare the problem leads to CWE-134. The product uses a function that accepts a format string as an argument, but the format string originates from an external source. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations (such as create, start, exec, stop, etc.) through the isula runtime (shim), the daemon reads the stderr output of the shim process via a pipe for error information display. If the buffer contains format specifiers such as %s, %x, or %n, it may trigger a format string vulnerability, potentially leading to information leakage, denial of service, or the risk of arbitrary writes.

The advisory is shared at atomgit.com. The identification of this vulnerability is CVE-2026-111434 since 10/16/2026. The exploitation is known to be easy. An attack has to be approached locally. Additional levels of successful authentication are necessary for exploitation. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 11/12/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• openEuler

Name

• iSulad

Version

• 2.1.0
• 2.1.1
• 2.1.2
• 2.1.3
• 2.1.4
• 2.1.5
• 2.1.6

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion