CyberRota Analysis
AI-GeneratedA vulnerability in the Matter SDK allows for a denial of service due to the use of an uninitialized value in the `GetDestinationGroupId().Value()` method, which can cause a crash when an InvokeCommand is issued without a valid destination group ID. This issue affects all versions prior to 1.4.0 and should be prioritized by developers and organizations using the Matter SDK to ensure system stability and prevent service interruptions. Immediate updates to versions post-commit 0360cc3 are recommended to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first checking whether a value exists. This leads to a crash when an InvokeCommand is sent without initializing the destination group ID. The issue affects all versions before commit 0360cc3 (Dec 5, 2024) and leads to denial of service through SIGABRT. It is fixed by adding a .HasValue() check before access.
Related CVEs
Other vulnerabilities affecting the same vendor(s)