Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first checking whether a value exists. This leads to a crash when an InvokeCommand is sent without initializing the destination group ID. The issue affects all versions before commit 0360cc3 (Dec 5, 2024) and leads to denial of service through SIGABRT. It is fixed by adding a .HasValue() check before access.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-15 | 1 | Disclosure1 |
| 2026-07-17 | 1 | Patch1 |
🚨 HIGH: CVE-2025-56364 (CVSS 7.5) Matter SDK (connectedhomeip) <1.4.0 vulnerable to DoS via uninitialized value crash. Network exploitable, no auth required. Patch: Update to v1.4.0+ #CVE #Vulnerability #PatchNow https://t.co/8tLhssO4XD
Post summary
A high-severity DoS vulnerability (CVE‑2025‑56364) affects Matter SDK versions below 1.4.0; the tweet recommends updating to v1.4.0 or later to mitigate.
CVE-2025-56364 Uninitialized Value Vulnerability in Matter SDK Before 1.4.0 Causes Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-56364
Post summary
The text announces CVE-2025-56364, noting an uninitialized value bug in Matter SDK before 1.4.0 that causes denial of service, with no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | csa-iot | matter | - | - | - |