CVE-2026-124737

A flaw was found in BusyBox. When the TFTP Trivial File Transfer Protocol client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP server can exploit this issue by sending...