A vulnerability was identified in osrg GoBGP up to 4.3.0.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. May 4, 2026 · NIST NVD

   Detected

   A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/packet/bmp/bmp.go of the component BMP Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. Upgrading to version 4.4.0 can resolve this issue. The identifier of the patch is bc77597d4233

2. Jun 17, 2026 · NIST NVD

   Updated

   A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/packet/bmp/bmp.go of the component BMP Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. Upgrading to version 4.4.0 can resolve this issue. The identifier of the patch is bc77597d4233

Affected

• cpe osrg/gobgpversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-7737

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-7737

  A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/packet/bmp/bmp.go of the component BMP Parser. The manipulation leads to out-of-bounds read. The attack c

  nvd.nist.gov

References

• Product · github.com
• Patch · github.com
• Patch · github.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com
• Permissions Required · vuldb.com