Heap Buffer Overflow in BusyBox TFTP Client
CVE-2026-124737
7.5HIGH
What is CVE-2026-124737?
A security flaw exists within the BusyBox TFTP client that relates to request handling for custom block sizes. When a customized small block size is requested and a standard-sized response is received, the system defaults back to an original block size without appropriately resizing the memory buffer. This creates a potential for a malicious TFTP server to exploit the system by sending standard network packets during the file transfer, leading to a heap buffer overflow. Such an exploit could allow an attacker to execute arbitrary code within the affected system or trigger a Denial of Service condition by crashing the application.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank ducanhluu for reporting this issue.