Zoom Workplace Apps Buffer Over-Read Vulnerability Allowing Denial-of-Service

A buffer over-read vulnerability has been identified in certain Zoom Workplace applications for Windows. This issue may enable an authenticated user to cause a denial-of-service condition through network access.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users are advised to update to the latest version of the Zoom Workplace Desktop App for Windows, available on the Zoom Download Center. For those using the Zoom Workplace VDI Client, update to version 6.3.10 or later, excluding versions 6.1.17 and 6.2.13. Zoom Rooms applications for Windows should also be updated to version 6.4.0 or later.