High severity7.5OSV Advisory· Published Dec 18, 2024· Updated Jun 17, 2026

CVE-2024-56319

Description

In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can lead to a denial of service (resource exhaustion).

Affected products

Project Chip/ConnectedhomeipOSV
Range: SVE_23_03/rc1, SVE_23_03/rc2, SVE_23_09/rc1, …
Matter/Matterllm-create
Range: <=1.4.0.0 before e3277eb
Matter/connectedhomeipllm-create
Range: <=1.4.0.0 before e3277eb

Patches

Vulnerability mechanics

References

github.com/project-chip/connectedhomeip/commit/e3277eb02ed8115de5887e8beca0e35007ba71f3nvd
github.com/project-chip/connectedhomeip/issues/36760nvd
github.com/project-chip/connectedhomeip/pull/36843nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000