PatchTheCVEmatter vulnerabilities and fixes
Recent CVEs affecting matter, with upgrade or downgrade steps. 5 tracked.
matter has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-07-14. Highest priority: CVE-2025-56363 (score 33/100).
- CVE-2025-56363 MEDIUM 5.7 UPGRADE A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting th
- CVE-2025-56361 MEDIUM 5.7 DOWNGRADE A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically with
- CVE-2025-56362 MEDIUM 5.7 DOWNGRADE A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically with
- CVE-2025-56365 MEDIUM 5.7 UPGRADE A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interactio
- CVE-2025-56364 MEDIUM 5.7 UPGRADE A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the
FAQ
How do I fix matter vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is matter being exploited right now?
None of the tracked matter CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which matter CVE should I patch first?
CVE-2025-56363 currently ranks highest (33/100): A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting th.