PT-2023-24686 · Zoom · Zoom Meeting Sdk

Published 2023-06-13 · Updated 2023-06-23 · CVE-2023-34115

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Zoom Meeting SDK versions prior to 5.13.0

Description The issue is related to a buffer copy without checking the size of the input, which may allow an authenticated user to potentially enable a denial of service via local access. This can result in the Zoom Meeting SDK crashing and needing to be restarted.

Recommendations For versions prior to 5.13.0, update to version 5.13.0 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2023-34115

Affected Products

Zoom Meeting Sdk

References · 4

• https://explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-34115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34115 · Security Note
• https://t.me/cvenotify/52235 · Telegram Post