CVE-2025-46785

Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - security@zoom.us

Published

2025-05-14

Last modified

2025-05-14

Weaknesses

CWE-120

Affected products

• Meeting Software Development Kit (Zoom)
• Rooms (Zoom)
• Rooms Controller (Zoom)
• Workplace Desktop (Zoom)
• Workplace Virtual Desktop Infrastructure (Zoom)
• Zoom Workplace Apps (Zoom Communications Inc)

References

• https://www.zoom.com/en/trust/security-bulletin/zsb-25021