CVE-2024-56318: Matter

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service.

Affected products

• Matter Matter: before 27ca6ec (fixed in 27ca6ec)

Published 2024-12-18. Last modified 2026-06-17.