Zoom Workplace Apps and SDKs - Use After Free
- ZSB-24017
- CVE-2024-27246
- Medium
- 4.3
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
User after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
Users can help keep themselves secure by applying the latest updates available at https://zoom.us/download.
- Zoom Workplace Desktop App for Windows before version 5.17.11
- Zoom Workplace Desktop App for macOS before version 5.17.11
- Zoom Workplace Desktop App for Linux before version 5.17.11
- Zoom Workplace VDI App for Windows before version 5.17.11 (except 5.16.15 and 5.15.17)
- Zoom Workplace App for iOS before version 5.17.11
- Zoom Workplace App for Android before version 5.17.11
- Zoom Rooms App for Windows before version 6.0.0
- Zoom Rooms App for macOS before version 6.0.0
- Zoom Rooms App for iPad before version 6.0.0
- Zoom Meeting SDK for Windows before version 5.17.11
- Zoom Meeting SDK for macOS before version 5.17.11
- Zoom Meeting SDK for Linux before version 5.17.11
- Zoom Meeting SDK for iOS before version 5.17.11
- Zoom Meeting SDK for Android before version 5.17.11
Reported by fre3dm4n.
| Revision | Date | Description |
|---|---|---|
| 1.1 | 06/17/2024 | Updated CVSS severity from Low to Medium. |
| 1.0 | 06/11/2024 | Initial publication. |