PT-2026-36764

CVE-2026-7735

·

Published

2026-04-01

·

Updated

2026-08-24

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions osrg GoBGP versions prior to 4.4.0
Description A buffer overflow can be triggered remotely within the AIGP Attribute Parser component. The issue exists in the PathAttributeAigp.DecodeFromBytes() function located in the pkg/packet/bgp/bgp.go file.
Recommendations Upgrade to version 4.4.0.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')
Related identifiers
CVE-2026-7735
BDU:2026-14518
USN-8348-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com