Buffer Under-read
CVE-2024-10395
Summary
No proper validation of the length of user input in http_server_get_content_type_from_extension.
- LOW
- NETWORK
- LOW
- UNCHANGED
- NONE
- NONE
- LOW
- HIGH
CWE-127 - Buffer Under-read
The software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.
References
Advisory Timeline
- Published
