CVE-2025-56363Disclosure(csa-iot / matter)

LOWCVSS 5.7 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters (Channel, Account Login, TargetNavigator, etc.). The function lacks proper validation of the delegate pointer before dereferencing. A remote unauthenticated attacker can exploit this issue by sending a crafted read request, causing the device to crash (denial of service). This issue has been confirmed in SDK version v1.4 (commit ab3d5ae).

csa-iot CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Other references

https://github.com/project-chip/connectedhomeip/

Weakness type (CWE)

CWE-476

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

matter

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-07-15); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

csa-iot

Products

matter

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-56363

Full discourse2 posts

DFIR Lab@DFIR_Lab89d
Disclosure
🚨 HIGH: CVE-2025-56363 (CVSS 7.5) - Null pointer dereference in Matter SDK <1.4.0. Remote unauthenticated attackers can crash devices via crafted read requests. Affects Channel, Account Login, TargetNavigator clusters. #CVE #PatchNow https://t.co/MVVf2tuQwT
Post summary
The tweet announces a new high‑severity CVE‑2025‑56363 affecting Matter SDK (<1.4.0), detailing a null pointer dereference that allows remote attackers to crash devices, and urges immediate patching.
0000018
80 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
Disclosure
CVE-2025-56363 Null Pointer Dereference in Matter SDK ReadRevisionAttribute Before 1.4.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-56363
Post summary
The post announces a null‐pointer dereference vulnerability in Matter SDK before version 1.4.0, but offers no proof‑of‑concept, exploit code, active use evidence, patch, or false‑positive claim.
00000117
4.1K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	csa-iot	matter	-	-	-

Explore more

Back to dashboard csa-iot CVEs matter vulnerabilities