Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-56317
7.5
HIGHCVSS v3
Published
December 18, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then attempts to recreate them based on user input. If input validation fails during decoding, the process stops, and no entries are restored by access-control-server.cpp, i.e., a denial of service.
project-chip/connectedhomeip
GitHubMatter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.
GitHubMatter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.NVD