CVE-2024-10395CWE-127

net: lib: http_server: Buffer Under-read

High · published February 3, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

No proper validation of the length of user input in http_server_get_content_type_from_extension.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.7th percentile
Weakness
CWE-127 · Buffer Under-read
Published
2025-02-03T06:59Z
EPSS history
Timeline
  • 03 FEB 06:59Z
    net: lib: http_server: Buffer Under-read
    cvelistv5