A vulnerability in the tftp-hpa client (Trivial File Transfer Protocol) allows remote unauthenticated attackers to cause a denial of service. The flaw occurs when the in.tftpd remap engine processes an inverse remap rule that aborts with a non-empty custom error message, leading to out-of-bounds read/write operations. This can crash the daemon. The issue is fixed in version 5.2-33.oe2203sp4.