CVE-2026-7737 | osrg GoBGP up to 4.3.0 BMP Parser pkg/packet/bmp/bmp.go out-of-bounds

A vulnerability was found in osrg GoBGP up to 4.3.0. It has been classified as problematic. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/packet/bmp/bmp.go of the component BMP Parser. The manipulation leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-7737. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.