Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Weakness
The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Meeting_software_development_kit | Zoom | * | 6.3.0 (excluding) |
| Rooms | Zoom | * | 6.3.0 (excluding) |
| Rooms_controller | Zoom | * | 6.3.0 (excluding) |
| Workplace | Zoom | * | 6.3.0 (excluding) |
| Workplace_desktop | Zoom | * | 6.3.0 (excluding) |
| Workplace_virtual_desktop_infrastructure | Zoom | * | 6.1.16 (excluding) |
| Workplace_virtual_desktop_infrastructure | Zoom | 6.1.17 (including) | 6.2.12 (excluding) |