The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) allows remote attackers to execute arbitrary code via a crafted packet which triggers an out-of-bounds read related to \Improper Indexing.\