CVE-2025-0143

Published: Jan 30, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a denial of service via network access.

Affected (3)

Products: Zoom: Meeting Software Development Kit, Video Software Development Kit, Workplace Desktop

Zoom

3 products

Meeting Software Development Kit

Video Software Development Kit

Workplace Desktop

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	Before 6.2.5
Zoom Video Software Development Kit	Before 6.2.5
Zoom Workplace Desktop	Before 6.2.5

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-25002/

Source: security@zoom.us

Vendor Advisory

Timeline

No history available yet.