CVE-2026-7736 | osrg GoBGP up to 4.3.0 pkg/packet/mrt/mrt.go parseRibEntry integer underflow

A vulnerability was found in osrg GoBGP up to 4.3.0 and classified as critical. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulation can lead to integer underflow.

This vulnerability is registered as CVE-2026-7736. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.