Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-30 | 2 | Disclosure2 |
| 2026-05-01 | 1 | Disclosure1 |
CVE-2026-28532 FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumul… https://www.cve.org/CVERecord?id=CVE-2026-28532
Post summary
A CVE for an integer overflow in FRRouting OSPF TLV parsers is disclosed with technical details, but no PoC, exploit, active exploitation, or patch information is provided.
CVE-2026-28532 Integer Overflow in FRRouting OSPF TLV Parser Before 10.5.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28532
Post summary
An integer overflow vulnerability in FRRouting's OSPF TLV Parser (CVE-2026-28532) affecting versions prior to 10.5.3 has been identified; no PoC, exploit, active use, patch, or debunking claim is provided.
🚨*CVE* CVE-2026-28532 FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumul… https://www.cve.org/CVERecord?id=CVE-2026-28532 ----- Traducción: CVE-2026-28532 FRR… http://infoflow.cloud`
Post summary
Rapid disclosure of an integer overflow flaw in FRRouting (pre-10.5.3), with a link to the CVE record.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | frrouting | frrouting | - | - | - |