Medium severity5.3NVD Advisory· Published May 4, 2026· Updated May 6, 2026
CVE-2026-7737
CVE-2026-7737
Description
A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/packet/bmp/bmp.go of the component BMP Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. Upgrading to version 4.4.0 can resolve this issue. The identifier of the patch is bc77597d42335c78464bc8e15a471d887bbdf260. Upgrading the affected component is recommended.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/osrg/gobgpGo | < 4.4.0 | 4.4.0 |
Affected products
2Patches
Vulnerability mechanics
References
7- github.com/osrg/gobgp/commit/bc77597d42335c78464bc8e15a471d887bbdf260nvdPatchWEB
- github.com/osrg/gobgp/releases/tag/v4.4.0nvdPatchProductWEB
- github.com/advisories/GHSA-w88c-9vg8-cmq8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-7737ghsaADVISORY
- vuldb.com/submit/807605nvdThird Party AdvisoryVDB EntryWEB
- vuldb.com/vuln/360912nvdThird Party AdvisoryVDB EntryWEB
- vuldb.com/vuln/360912/ctinvdPermissions RequiredVDB EntryWEB
News mentions
0No linked articles in our index yet.