CVE-2026-82391

The HTTP/2 front-end of the Zephyr HTTP server aliased connection receive state as a scratch output. In subsys/net/lib/http/httpserverhttp2.c, handlehttp2staticfsresource passed &client-datalen as the filesize out-parameter of httpserverfindfile. client-datalen is the count of unprocessed bytes...