CVE Intelligence

H. Peter Anvin vulnerabilities

🔔 Create alert RSS

Published CVEs affecting H. Peter Anvin products: 1 record(s), with severity, exploitation and fixes.

Tftp-hpa 1

Exploited only (KEV) →

CVE-2026-106026 Low · 3.7 CWE-125 Oct 6, 2026
tftp-hpa 5.4 before 6.0 Out-of-Bounds Read via tftpd Remap Jump Rule
tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request handler.