CVE-2025-30670

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - security@zoom.us

Published

2025-04-08

Last modified

2025-04-08

Weaknesses

CWE-476

Affected products

• Meeting Software Development Kit (Zoom)
• Rooms (Zoom)
• Rooms Controller (Zoom)
• Workplace Desktop (Zoom)
• Workplace Virtual Desktop Infrastructure (Zoom)
• Zoom Workplace Apps For Windows (Zoom Communications Inc)

References

• https://www.zoom.com/en/trust/security-bulletin/zsb-25015