Vulnerability Assessment of Matter Protocol

초록

Matter is a universal Internet of Things standard protocol designed by the Connectivity Standards Alliance (CSA) for cross-platform interoperability in smart home ecosystems. Because the CSA provides an open-source software development kit (SDK) as a shared reference implementation, security flaws at the SDK level can propagate across numerous commercial devices. This study presents a systematic vulnerability assessment of the Matter SDK using a combination of static analysis and coverage-guided protocol fuzzing, targeting transport-layer message handling, session establishment, and cluster-level command processing. Three previously unknown vulnerabilities were discovered: a nonatomic access control list update flaw (CVE-2024-56317), a preauthentication null pointer dereference in Transmission Control Protocol handling (CVE-2024-56318), and an unbounded resource allocation in the user label cluster (CVE-2024-56319). All vulnerabilities were disclosed to the CSA and patched into the SDK.

키워드