Zoom Workplace Apps NULL Pointer Dereference Vulnerability Allowing Denial-of-Service

A NULL pointer dereference vulnerability has been identified in certain Zoom Workplace applications for Windows. This issue may allow an authenticated user to cause a denial-of-service condition through network access. The vulnerability affects the Zoom Workplace Desktop App, VDI Client, Zoom Rooms Controller, Zoom Rooms Client, and the Zoom Meeting SDK, all prior to specific versions.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users are advised to update to the latest version of the Zoom Workplace App for Windows. The latest version can be downloaded from the Zoom Download Center. For Zoom Rooms applications, updates can be applied through the Zoom Rooms Controller or the Zoom Rooms Client.