← Back

CVE-2025-56364

nvd nist
Published: Jul 14, 2026Modified: Jul 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first checking whether a value exists. This leads to a crash when an InvokeCommand is sent without initializing the destination group ID. The issue affects all versions before commit 0360cc3 (Dec 5, 2024) and leads to denial of service through SIGABRT. It is fixed by adding a .HasValue() check before access.

Affected (1)

Products: Csa Iot: Matter
Csa Iot
1 product
Matter
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Matter
Before 1.4.0.0

Related CWEs

CWE-457
Use of Uninitialized Variable
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

References (4)

Source: cve@mitre.org
Product
Source: cve@mitre.org
Issue Tracking
Source: cve@mitre.org
Patch
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Issue Tracking

Timeline

No history available yet.