CVE-2024-56318
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Dec 18, 2024
Updated: Jan 2, 2025
CWE ID 476
Summary
CVE-2024-56318 is a denial-of-service vulnerability affecting Matter, also known as connectedhomeip or Project CHIP, before version 27ca6ec. In the file rawTCP.cpp, there is a flaw in TCPBase::ProcessSingleMessage function. When TCP packets with a zero messageSize are received, a NULL pointer dereference occurs, resulting in a denial-of-service condition. This issue can be exploited to cause the affected system to crash or become unresponsive.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.