Vulnerability in Matter
CVE-2024-56317
In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then attempts to recreate them based on user input. If input validation fails during decoding, the process stops, and no entries are restored by access-control-server.cpp, i.e., a denial of service.
EPSS: 0.004 (29.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Matter — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-56317?
- CVE-2024-56317 is a high-severity vulnerability in Matter, classified under Improper Preservation of Permissions. CVSS score: 7.5/10. Published 2024-12-18.
- How severe is CVE-2024-56317?
- High severity. CVSS v3 base score is 7.5 out of 10.