Matter

Products

ProductCVEsExploitedLatest
Matter3–Dec 18, 2024

Exploited and recent CVEs

  • CVE-2024-56319 High 7.5 In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can lead to a denial of service (resource exhaustion). 0.5%
  • CVE-2024-56317 High 7.5 In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then attempts to recreate them based on user input. If input validati 0.4%
  • CVE-2024-56318 High 7.5 In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSiz 0.6%