Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-22882 EUVD-2023-26992GHSA-rp8w-6f7v-487w

Denial of Service in Zoom Clients

Published Mar 16, 2023 · Updated Feb 26, 2025 · Assigned by Zoom

Vendor: Zoom Video Communications Product: Zoom (for Android, iOS, Linux, macOS, and Windows) clients before version 5.13.5 Platform: Android Platform: iOS Platform: Linux Platform: macOS Platform: Windows

Description

Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom (for Android, iOS, Linux, macOS, and Windows) clients before version 5.13.5 unspecified – < 5.13.5 5.13.5

References