A reachable infinite loop caused by an integer wraparound occurs in the Silicon Labs Matter SDK. The flaw allows an attacker to send crafted data that triggers the SDK to enter an endless loop, consuming processor cycles until the device becomes unresponsive. The result is a denial‑of‑service condition that requires a hard reset to restore normal operation. The weakness corresponds to CWE‑190 (Integer Overflow or Wraparound) and CWE‑835 (Infinite Loop).

The issue affects devices that run Silicon Labs Matter, the Matter protocol stack supplied by Silicon Labs. The vendor list identifies Silicon Labs Matter, but no specific firmware or SDK version numbers are supplied. Administrators should review all deployed Matter firmware to determine whether they are using the affected build, focusing on versions prior to any releases that mention the integer wraparound fix.

The CVSS base score of 6 indicates a medium severity vulnerability. The EPSS score of less than 1% implies a very low probability of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote delivery of malformed Matter data, though the description does not state a specific means. Because the attack necessitates an infinite loop, it requires a target that executes the vulnerable Matter SDK code, and the impact is limited to device availability. No public exploits are documented; however, the denial‑of‑service condition can disrupt network services that rely on those devices.