GoBGP version 4.3.0 and earlier contains an out-of-bounds read vulnerability in the ParseIP6Extended function. This flaw can be triggered by an attacker supplying a crafted BGP UPDATE message, leading to a Denial of Service (DoS) condition. The issue is fixed in version 4.4.0.