Skip to content
OpenAdvisories
High · 7.5 CVE-2024-56318 EUVD-2024-53107GHSA-93xr-jvr5-8x88

In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBa…

Published Dec 18, 2024 · Updated Jan 2, 2025 · Assigned by mitre

Description

In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service.

Affected products

VendorProductAffectedFixed
Matter Matter < 27ca6ec 27ca6ec

References