This seems to be a bug in upstream dnsmasq, where a fix is currently discussed at [Dnsmasq-discuss] [PATCH] TFTP off-by-2 bugfix - CRASH.
This seems to be a bug in upstream dnsmasq, where a fix is currently discussed at [Dnsmasq-discuss] [PATCH] TFTP off-by-2 bugfix - CRASH.