CVE-2026-37457 | MSRC Compact Detail

Severity

n/a

Impact

n/a

CVSS

7.5 base · 7.5 temporal

Release

2026-05-05

Signals

Mariner Unknown impact Exploited: n/a Publicly disclosed: n/a Exploitability: n/a

CWE

CWE-787: Out-of-bounds Write

Patch Diff

Loading module diff metadata...

Resolved binary override

Use this when the MSRC module name cannot be mapped automatically or the resolved binary looks wrong.

Old version New version

Description

No description was published by MSRC.

FAQ / Articles

No FAQ or article content was published.

MSRC Fields

Module / Tag

Mariner

Release number

2026-May

Latest revision

2026-05-08

CNA

mitre

Customer action

required

Denial of service

N/A

CVSS Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

MSRC

Official detail

CVE Record

CVE.org

Revision History

v1 · 2026-05-05

Information published.

v2 · 2026-05-06

Information published.

v3 · 2026-05-08

Information published.

CVE-2026-37457 · An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.