eStargz layer decoder in the estartgz package contains a vulnerability that an input containing a cyclic hardlink crashes the process with Go's unrecoverable stack overflow error. Stargz Snapshotter with the default configuration relies on that function so pulling an eStargz image containing a muliciously crafted layer with a cyclic hardlink crashes the Stargz Snapshotter process.