A vulnerability in the tftp-hpa client implementation of the Trivial File Transfer Protocol (TFTP) allows a remote unauthenticated attacker to cause a denial of service. The flaw occurs when the in.tftpd remap engine processes an inverse remap rule that aborts with a non-empty custom error message, leading to out-of-bounds read/write operations. This can crash the daemon, disrupting service availability. The issue affects versions prior to 5.2-33.oe2403sp3 and has a high severity rating with a CVSS score of 7.5.