Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/packet/bmp/bmp.go of the component BMP Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. Upgrading to version 4.4.0 can resolve this issue. The identifier of the patch is bc77597d42335c78464bc8e15a471d887bbdf260. Upgrading the affected component is recommended.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-7737 A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the fi… https://www.cve.org/CVERecord?id=CVE-2026-7737
Post summary
The text announces CVE-2026-7737 affecting osrg GoBGP up to version 4.3.0, specifying vulnerable functions and providing a link to the CVE record.
CVE-2026-7737 Out-of-Bounds Read in osrg GoBGP BMP Parser Versions Up to 4.3.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7737
Post summary
CVE-2026-7737 reveals an out-of-bounds read vulnerability in osrg GoBGP BMP Parser up to version 4.3.0, with no evidence of a published PoC, exploit code, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | osrg | gobgp | - | - | - |