CVE-2026-28532

A flaw was found in FRRouting. An integer overflow vulnerability exists in several OSPF Traffic Engineering and Segment Routing TLV parser functions. An attacker with an established OSPF (Open Shortest Path Path First) adjacency can send a specially crafted LS (Link State) Update packet containing a malicious Type 10 or Type 11 Opaque LSA (Link State Advertisement). This can trigger out-of-bounds memory reads, leading to a Denial of Service (DoS) by crashing all affected routers within the OSPF area or autonomous system.

Moderate impact. This flaw in FRRouting's OSPF TLV parser functions can lead to a denial of service. An attacker with an established OSPF adjacency can send a specially crafted packet, triggering out-of-bounds memory reads and crashing routers within the OSPF area or autonomous system. Exploitation requires network proximity and an active OSPF peering relationship.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.