Buffer Overflow Vulnerability in Zoom Client Software
CVE-2023-36532

5.9MEDIUM

Key Information:

Vendor: Zoom Video Communications, Inc.
Status: Zoom Clients
Vendor: CVE Published:; 8 August 2023

🔔 Create Zoom Video Communications, Inc. Vulnerability Alert

What is CVE-2023-36532?

A buffer overflow vulnerability in Zoom Client software can be exploited by unauthenticated users to initiate a denial of service attack. Relatively older versions, specifically those released before 5.14.5, are susceptible to this security flaw, which could potentially allow unauthorized access over a network. Updating to the latest version is critical to safeguard against potential exploits that could disrupt service availability.

Affected Version(s)

Zoom Clients before 5.14.5

References

https://explore.zoom.us/en/trust/security/security-bulletin/

CVSS V3.1

Score:

5.9

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 8, 2023
Vulnerability Reserved
Jun 22, 2023

CVE-2023-36532 Data

JSON