CVE-2024-27239

Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@zoom.us

Published

2025-02-25

Last modified

2025-10-01

Weaknesses

CWE-416

Affected products

• Meeting Software Development Kit (Zoom)
• Rooms (Zoom)
• Workplace (Zoom)
• Workplace Desktop (Zoom)
• Workplace Virtual Desktop Infrastructure (Zoom)
• Zoom Workplace Apps And Sdks (Zoom Communications Inc)

References

• https://www.zoom.com/en/trust/security-bulletin/zsb-24018/