CVE-2024-56317
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Dec 18, 2024
Updated: Jan 2, 2025
CWE ID 281
Summary
CVE-2024-56317 is a denial-of-service vulnerability affecting Matter, also known as connectedhomeip or Project CHIP, up to version 1.4.0.0. The WriteAcl function in Matter deletes all existing access control list (ACL) entries before attempting to create new ones based on user input. If the input fails validation during decoding, the process ceases, and the access-control-server.cpp does not restore any ACL entries, resulting in a denial of service.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Matter