Zoom Workplace Apps for Windows - NULL Pointer Dereference
- ZSB-25018
- CVE-2025-30665, CVE-2025-30666
- Medium
- 6.5
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
Users can help keep themselves secure by applying the latest updates available at https://zoom.us/download.
- Zoom Workplace Desktop App for Windows before version 6.4.0
- Zoom Workplace VDI Client for Windows before version 6.3.10 (except versions 6.1.17 and 6.2.13)
- Zoom Rooms Controller for Windows before version 6.4.0
- Zoom Rooms Client for Windows before version 6.4.0
- Zoom Meeting SDK for Windows before version 6.4.0
Reported by fre3dm4n.
| Revision | Date | Description |
|---|---|---|
| 1.0 | 05/13/2025 | Initial publication. |