PT-2026-106729

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite string in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request...