CVE-2024-22086

CVE-2024-22086 describes a critical stack-based buffer overflow vulnerability in the 'cherry' HTTP server, specifically within the handle_request function in http.c. This flaw, affecting cherry through version 4b877df, can be triggered by a long URI, potentially leading to remote code execution. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its critical severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.