๐Ÿ” CVE Alert

CVE-2024-56318

HIGH 7.5
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th

In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service.

CWE CWE-476
Vendor matter
Product matter
Published Dec 18, 2024
Last Updated Jan 2, 2025
Stay Ahead of the Next One

Get instant alerts for matter matter

Be the first to know when new high vulnerabilities affecting matter matter are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Matter / Matter
0 < 27ca6ec

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
github.com: https://github.com/project-chip/connectedhomeip/issues/36750 github.com: https://github.com/project-chip/connectedhomeip/pull/36751 github.com: https://github.com/project-chip/connectedhomeip/commit/27ca6ec255b78168e04bd71e0f1a473869cf144b