CVE-2026-7736

Name of the Vulnerable Software and Affected Versions osrg GoBGP versions prior to 4.4.0

Description A remote attack can be launched against the parseRibEntry() function in the pkg/packet/mrt/mrt.go file, which may lead to an integer underflow. Integer underflow occurs when an arithmetic operation attempts to create a numeric value smaller than the minimum value the variable can store.

Recommendations Update to version 4.4.0. As a temporary workaround, restrict access to the parseRibEntry() function to minimize the risk of exploitation.