CVE-2024-10395

CVE-2024-10395 is a high-severity vulnerability affecting Zephyr Project's Zephyr RTOS, stemming from improper validation of user input length in the http_server_get_content_type_from_extension function. This flaw allows for a denial-of-service attack, as indicated by its CVSS score of 7.5, requiring no user interaction or complex attack conditions. While the vulnerability has a high theoretical impact (availability), there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.