High · 7.5 CVE-2025-67433 EUVD-2025-207242GHSA-q6f4-2qxx-8cww

A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service …

Published Feb 12, 2026 · Updated Feb 26, 2026 · Assigned by mitre

Description

A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (DoS) via a crafted DATA packet.

References

https://gist.github.com/Hyobin/f1b7d48d29e60a378bb9c88ba8b8080a
https://sourceforge.net/projects/tftp-server/files/tftp%20server%20multithreaded/
https://gist.github.com/transparencybeam/f1b7d48d29e60a378bb9c88ba8b8080a