Vulnerability Description
In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/project-chip/connectedhomeip/commit/27ca6ec255b78168e04bd71e0
- https://github.com/project-chip/connectedhomeip/issues/36750
- https://github.com/project-chip/connectedhomeip/pull/36751
FAQ
What is CVE-2024-56318?
CVE-2024-56318 is a vulnerability with a CVSS score of 7.5 (HIGH). In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSiz...
How severe is CVE-2024-56318?
CVE-2024-56318 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-56318?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.