Read the docs
TI-2024-37279 Aliases CVE-2024-56318GHSA-93xr-jvr5-8x88

NULL pointer dereference in Matter

Priority HIGH 72CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-476.

Summary

In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00597 48th percentileScored 2026-11-07
Fix Fixed Matter (Matter): 27ca6ec

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MatterMatterbefore 27ca6ec27ca6ecPatch availableCNA
  • Matter VendorMatter Affected before 27ca6ec Fixed in 27ca6ec Patch available CNA

Remediation

  • Fix · CNA Matter (Matter) Fixed in 27ca6ec

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-56318
  2. 2026-10-03 Alias added: GHSA-93xr-jvr5-8x88

References

Other 3

  • TI-2024-37280 Resource allocation without limits in Matter CVSS 3.1HIGH 7.5
  • TI-2024-37278 In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function… CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences