# CVE-2026-28532: FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment…

Source: https://junglewise.ai/threats/cve-2026-28532-frrouting-before-10-5-3-contains-an-integer-overflow  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-30  
License: CC BY 4.0 with a link back

CVE-2026-28532 · Severity: medium · CVSS 6.5 · Published 2026-04-30

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.

Technologies: [Frrouting](https://junglewise.ai/threats/technologies/frrouting). Vendors: [Frrouting](https://junglewise.ai/threats/vendors/frrouting).

## Quick answers

**Is CVE-2026-28532 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-28532 being exploited in the wild.

**How severe is CVE-2026-28532?** Medium severity, with a CVSS score of 6.5, published 30 April 2026.

**Which products and versions are affected?** Frrouting. The advisory does not name versions.

**Is there a fix for CVE-2026-28532?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-28532?** Check whether you run Frrouting. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Frrouting

## Related threats

- [FRRouting OSPFv3 spoofed packet acceptance](https://junglewise.ai/threats/cve-2026-119776-in-all-prior-released-versions-of-frrouting-the-ospfv3-for-ipv6)
- [FRRouting Denial of Service in rfapiRibBi2Ri function](https://junglewise.ai/threats/cve-2026-37460-frrouting-denial-of-service-in-rfapiribbi2ri-function)
- [FRRouting integer underflow in BGP UPDATE message parsing](https://junglewise.ai/threats/cve-2026-37459-frrouting-integer-underflow-in-bgp-update-message-parsing)
- [FRRouting FRR denial of service in MP_REACH_NLRI component](https://junglewise.ai/threats/cve-2026-37458-frrouting-frr-denial-of-service-in-mp-reach-nlri-component)
- [FRRouting FRR out-of-bounds write in bgp_flowspec_op_decode](https://junglewise.ai/threats/cve-2026-37457-frrouting-frr-out-of-bounds-write-in-bgp-flowspec-op-decode)