CVE-2026-37457

The FRRouting (FRR) suite contains an off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (located in bgpd/bgp_flowspec_util.c) within the stable/10.0 version. An attacker can exploit this flaw by supplying a crafted FlowSpec component to cause a Denial of Servic...