CVE-2023-34115
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
In Zoom Meeting SDK before version 5.13.0, there is a buffer copy issue without checking the size of input, which may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK crashing and needing to be restarted.
Risk Assessment
The organization may experience service outages in Zoom, impacting work efficiency and team communication.
Recommendation
It is recommended to update the Zoom Meeting SDK to version 5.13.0 or later to mitigate this vulnerability.
Original NVD description (English source)
Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK to crash and need to be restarted.