Vulnerabilities > CVE-2024-42438 - Out-of-bounds Write vulnerability in Zoom products

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

zoom

CWE-787

NVD

Published: 2024-08-14

Updated: 2024-08-29

Summary

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

Vulnerable Configurations

Part	Description	Count
Application	Zoom Zoom Rooms Controller * Zoom Rooms 5.15.0 Zoom Rooms - Zoom Rooms 5.11.3 Zoom Rooms 5.11.4 Zoom Rooms 5.12.6 Zoom Rooms 5.13.5 Zoom Rooms 5.14.5 Zoom Rooms 5.14.10 Zoom Rooms 5.15.10 Zoom Rooms 5.16.0 Zoom Rooms 4.6.5 Zoom Rooms 5.0.0 Zoom Rooms 5.0.2 Zoom Rooms 5.0.3 Zoom Rooms 5.0.4 Zoom Rooms 5.0.5 Zoom Rooms 5.1.0 Zoom Rooms 5.1.1 Zoom Rooms 5.1.2 Zoom Rooms 5.2.0 Zoom Rooms 5.2.1 Zoom Rooms 5.2.2 Zoom Rooms 5.3.0 Zoom Rooms 5.4.0 Zoom Rooms 5.4.3 Zoom Rooms 5.5.0 Zoom Rooms 5.5.1 Zoom Rooms 5.6.0 Zoom Rooms 5.6.3 Zoom Rooms 5.6.7 Zoom Rooms 5.7.0 Zoom Rooms 5.7.3 Zoom Rooms 5.7.5 Zoom Rooms 5.8.0 Zoom Rooms 5.11.0 Zoom Rooms 5.12.7 Zoom Rooms 5.13.0 Zoom Rooms 5.13.3 Zoom Rooms 5.14.0 Zoom Rooms 5.15.5 Zoom Meeting Software Development KIT - Zoom Meeting Software Development KIT 5.13.5 Zoom Meeting Software Development KIT 5.13.10 Zoom Meeting Software Development KIT 5.14.0 Zoom Meeting Software Development KIT 5.14.2 Zoom Meeting Software Development KIT 5.14.5 Zoom Meeting Software Development KIT 5.14.7 Zoom Meeting Software Development KIT 5.14.10 Zoom Meeting Software Development KIT 5.14.11 Zoom Meeting Software Development KIT 5.15.2 Zoom Meeting Software Development KIT 5.15.3 Zoom Meeting Software Development KIT 5.15.5 Zoom Meeting Software Development KIT 5.15.7 Zoom Meeting Software Development KIT 5.15.10 Zoom Meeting Software Development KIT 5.15.12 Zoom Meeting Software Development KIT 5.16.0 Zoom Meeting Software Development KIT 5.16.1 Zoom Meeting Software Development KIT 5.16.2 Zoom Meeting Software Development KIT 5.16.5 Zoom Meeting Software Development KIT 5.16.6 Zoom Meeting Software Development KIT 5.16.10 Zoom Meeting Software Development KIT 5.10.3 Zoom Meeting Software Development KIT 5.10.6 Zoom Meeting Software Development KIT 5.11.0 Zoom Meeting Software Development KIT 5.11.1 Zoom Meeting Software Development KIT 5.11.3 Zoom Meeting Software Development KIT 5.11.10 Zoom Meeting Software Development KIT 5.12.0 Zoom Meeting Software Development KIT 5.12.1 Zoom Meeting Software Development KIT 5.12.2 Zoom Meeting Software Development KIT 5.12.8 Zoom Meeting Software Development KIT 5.13.0 Zoom Meeting Software Development KIT 5.15.0 Zoom Workplace Virtual Desktop Infrastructure * Zoom Workplace Desktop * Zoom Workplace *	123

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://www.zoom.com/en/trust/security-bulletin/zsb-24031