CVE-2026-37457CVSS 7.5

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.

Published
May 22, 2026
Last Modified

🔗 CVE IDs covered (1)