An issue was discovered in FRRouting (FRR) through 10.1. bgpattrencap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-47868.json"