CVE-2025-56364

A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first checking whether a value exists. This leads to a crash when an InvokeCommand is sent without initializing the destination group ID. The issue affects all versions before commit 0360cc3 (Dec 5, 2024) and leads to denial of service through SIGABRT. It is fixed by adding a .HasValue() check before access.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/project-chip/connectedhomeip/	Product
https://github.com/project-chip/connectedhomeip/issues/36711	Issue Tracking
https://github.com/project-chip/connectedhomeip/pull/36729	Patch
https://github.com/project-chip/connectedhomeip/issues/36711	Issue Tracking

Configurations

Configuration 1 (hide)

cpe:2.3:a:csa-iot:matter:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-07-14 23:17

Updated : 2026-07-17 03:00

NVD link : CVE-2025-56364

Mitre link : CVE-2025-56364

CVE.ORG link : CVE-2025-56364

JSON object : View

Products Affected

csa-iot

matter

CWE

CWE-457

Use of Uninitialized Variable

{"id": "CVE-2025-56364", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-56364", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-15T14:19:58.487174Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-07-14T23:17:27.467", "references": [{"url": "https://github.com/project-chip/connectedhomeip/", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/project-chip/connectedhomeip/issues/36711", "tags": ["Issue Tracking"], "source": "cve@mitre.org"}, {"url": "https://github.com/project-chip/connectedhomeip/pull/36729", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://github.com/project-chip/connectedhomeip/issues/36711", "tags": ["Issue Tracking"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-457"}]}], "descriptions": [{"lang": "en", "value": "A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first checking whether a value exists. This leads to a crash when an InvokeCommand is sent without initializing the destination group ID. The issue affects all versions before commit 0360cc3 (Dec 5, 2024) and leads to denial of service through SIGABRT. It is fixed by adding a .HasValue() check before access."}], "lastModified": "2026-07-17T03:00:07.473", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:csa-iot:matter:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF4DD78D-70A5-4B35-AAB4-3F4F948B6194", "versionEndExcluding": "1.4.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}