CVE-2023-22882

Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.

Score

CVSS 3.1 7.5 High

Status

Modified - security@zoom.us

Published

2023-03-16

Last modified

2025-02-26

Weaknesses

CWE-119

Affected products

• Zoom (Zoom)
• And Windows Clients Before Version 5.13.5 (Zoom Video Communications Inc)
• Ios (Zoom Video Communications Inc)
• Linux (Zoom Video Communications Inc)
• Macos (Zoom Video Communications Inc)
• Zoom For Android (Zoom Video Communications Inc)

References

• https://explore.zoom.us/en/trust/security/security-bulletin/