CVE-2026-28532: FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment…
CVE-2026-28532 · Severity: medium · CVSS 6.5 · Published 2026-04-30
FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.
No. Junglewise Threat Intelligence has no report of CVE-2026-28532 being exploited in the wild.
How severe is CVE-2026-28532?
Medium severity, with a CVSS score of 6.5, published 30 April 2026.
Which products and versions are affected?
Frrouting. The advisory does not name versions.
Is there a fix for CVE-2026-28532?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2026-28532?
Check whether you run Frrouting. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.