CVE-2024-24690

Published: Feb 14, 2024Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.

Affected (11)

Products: Zoom: Meeting Software Development Kit, Rooms, Vdi Windows Meeting Clients, Video Software Development Kit, Zoom

5 products

Meeting Software Development Kit

Vdi Windows Meeting Clients

Video Software Development Kit

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	Before 5.16.5
Zoom Rooms	Before 5.17.0
Zoom Vdi Windows Meeting Clients	Before 5.14.14
Zoom Vdi Windows Meeting Clients	After 5.14.14 to 5.15.12
Zoom Vdi Windows Meeting Clients	After 5.15.12 to 5.16.10
Zoom Video Software Development Kit	Before 5.16.5
Zoom Zoom	Before 5.16.5
Zoom Zoom	Before 5.16.5
Zoom Zoom	Before 5.16.5
Zoom Zoom	Before 5.16.5
Zoom Zoom	Before 5.16.5

Related CWEs

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (2)

https://www.zoom.com/en/trust/security-bulletin/ZSB-24007/

Source: security@zoom.us

Vendor Advisory

https://www.zoom.com/en/trust/security-bulletin/ZSB-24007/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.