CVE-2026-7735 | osrg GoBGP up to 4.3.0 AIGP Attribute Parser pkg/packet/bgp/bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow

A vulnerability has been found in osrg GoBGP up to 4.3.0 and classified as critical. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow.

This vulnerability is cataloged as CVE-2026-7735. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.