CVE-2024-45421: Zoom Apps - Buffer Overflow
Published Feb 25, 2025
·Updated
Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Affected Software
24 affected components
Zoom Zoom Apps
Zoom Meeting Software Development Kit Android<6.2.0
Zoom Meeting Software Development Kit Iphone Os<6.2.0
Zoom Meeting Software Development Kit Linux<6.2.0
Zoom Meeting Software Development Kit Macos<6.2.0
Zoom Meeting Software Development Kit Windows<6.2.0
Zoom Rooms Ipad Os<6.2.0
Zoom Rooms Macos<6.2.0
Zoom Rooms Windows<6.2.0
Zoom Rooms Controller Android<6.2.0
Zoom Rooms Controller Linux<6.2.0
Zoom Rooms Controller Macos<6.2.0
Zoom Rooms Controller Windows<6.2.0
Zoom Video Software Development Kit Android<6.2.0
Zoom Video Software Development Kit Iphone Os<6.2.0
Zoom Video Software Development Kit Linux<6.2.0
Zoom Video Software Development Kit Macos<6.2.0
Zoom Video Software Development Kit Windows<6.2.0
Zoom Workplace Android<6.2.0
Zoom Workplace Iphone Os<6.2.0
Zoom Workplace Desktop Linux<6.2.0
Zoom Workplace Desktop Macos<6.2.0
Zoom Workplace Desktop Windows<6.2.0
Zoom Workplace Virtual Desktop Infrastructure Windows<6.1.12
Event History
Feb 25, 2025
CVE Published
via MITRE·07:55 PM
Data Sourced
via MITRE·07:55 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-45421?
CVE-2024-45421 is classified as a high severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2024-45421?
To fix CVE-2024-45421, install the latest updates for the affected Zoom Apps and development kits.
3
Who is affected by CVE-2024-45421?
Users of Zoom Apps, Zoom Meeting SDK, and Zoom Rooms versions prior to 6.2.0 are affected by CVE-2024-45421.
4
Can CVE-2024-45421 be exploited remotely?
Yes, CVE-2024-45421 can be exploited via network access, allowing authenticated users to escalate privileges.
5
What are the consequences of CVE-2024-45421?
Exploitation of CVE-2024-45421 may lead to unauthorized access and privilege escalation for authenticated users.