CVE-2025-27439: Zoom Apps - Buffer Underflow
Published Mar 11, 2025
·Updated
Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Affected Software
21 affected components
Zoom Zoom Apps
Zoom Meeting Software Development Kit Android<6.3.0
Zoom Meeting Software Development Kit Iphone Os<6.3.0
Zoom Meeting Software Development Kit Linux<6.3.0
Zoom Meeting Software Development Kit Macos<6.3.0
Zoom Meeting Software Development Kit Windows<6.3.0
Zoom Rooms Android<6.3.0
Zoom Rooms Ipados<6.3.0
Zoom Rooms Macos<6.3.0
Zoom Rooms Windows<6.3.0
Zoom Rooms Controller Android<6.3.0
Zoom Rooms Controller Linux<6.3.0
Zoom Rooms Controller Macos<6.3.0
Zoom Rooms Controller Windows<6.3.0
Zoom Workplace Android<6.3.0
Zoom Workplace Iphone Os<6.3.0
Zoom Workplace Desktop Linux<6.3.0
Zoom Workplace Desktop Macos<6.3.0
Zoom Workplace Desktop Windows<6.3.0
Zoom Workplace Virtual Desktop Infrastructure Windows<6.1.16
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.1.17<6.2.12
Event History
Mar 11, 2025
CVE Published
via MITRE·05:10 PM
Data Sourced
via MITRE·05:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-27439?
CVE-2025-27439 is classified as a critical vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2025-27439?
To fix CVE-2025-27439, ensure that you update your Zoom Workplace Apps to the latest version provided by Zoom.
3
What types of systems are affected by CVE-2025-27439?
CVE-2025-27439 primarily affects Zoom Workplace Apps for macOS.
4
What can an attacker do using CVE-2025-27439?
An attacker can execute a privilege escalation attack, potentially gaining unauthorized access to sensitive information or features.
5
Is authentication required to exploit CVE-2025-27439?
Yes, exploitation of CVE-2025-27439 requires the attacker to be an authenticated user.