CVE-2026-82391

The Zephyr HTTP server contains an out-of-bounds write vulnerability in its HTTP/2 front-end when handling static-filesystem resources. The root cause is located in subsys/net/lib/http/http_server_http2.c, where the handle_http2_static_fs_resource() function incorrectly uses &client->data_len ...