← Back

CVE-2024-27243

nvd nist
Published: May 15, 2024Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: security@zoom.us (Secondary)

Description

Buffer overflow in some Zoom Workplace Apps and SDK’s may allow an authenticated user to conduct a denial of service via network access.

Affected (13)

Zoom
4 products
Meeting Software Development Kit
Workplace
Workplace Desktop
Workplace Virtual Desktop Infrastructure
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Zoom
Meeting Software Development Kit
version < 5.17.5
Meeting Software Development Kit
version < 5.17.5
Meeting Software Development Kit
version < 5.17.5
Meeting Software Development Kit
version < 5.17.5
Meeting Software Development Kit
version < 5.17.5
Zoom
Workplace
version < 5.17.5
Workplace
version < 5.17.5
Zoom
Workplace Desktop
version < 5.17.5
Workplace Desktop
version < 5.17.5
Workplace Desktop
version < 5.17.5
Zoom
Workplace Virtual Desktop Infrastructure
version < 5.15.17
Workplace Virtual Desktop Infrastructure
5.16.0 ≤ version < 5.16.15
Workplace Virtual Desktop Infrastructure
5.16.16 ≤ version < 5.17.5

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (2)

Source: security@zoom.us
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.