high7.5
CVE-2024-56318
In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMes…
Impact
In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service.
Affected products
| Product | Affected versions |
|---|---|
| Matter (Aka Connectedhomeip Or Project CHIP) | through 1.4.0.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.