CVE-2025-49463

Published: Jul 10, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: security@zoom.us (Secondary)

Description

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access.

Affected (1)

Products: Zoom: Zoom

Zoom

1 product

Zoom

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zoom Zoom	Before 6.4.5

Related CWEs

CWE-691

Insufficient Control Flow Management

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

References (1)

https://https://www.zoom.com/en/trust/security-bulletin/zsb-25026/

Source: security@zoom.us

Broken LinkVendor Advisory

Timeline

No history available yet.