CVE-2024-56319

Published: Dec 18, 2024Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can lead to a denial of service (resource exhaustion).

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (4)

https://github.com/project-chip/connectedhomeip/commit/e3277eb02ed8115de5887e8beca0e35007ba71f3

Source: cve@mitre.org

https://github.com/project-chip/connectedhomeip/issues/36760

Source: cve@mitre.org

https://github.com/project-chip/connectedhomeip/pull/36843

Source: cve@mitre.org

https://github.com/project-chip/connectedhomeip/issues/36760

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.