CVE-2025-27440: Zoom Apps - Heap-based Buffer Overflow
Published Mar 11, 2025
·Updated
Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Affected Software
21 affected components
Zoom Workplace Apps
Zoom Meeting Software Development Kit Android<6.3.0
Zoom Meeting Software Development Kit Iphone Os<6.3.0
Zoom Meeting Software Development Kit Linux<6.3.0
Zoom Meeting Software Development Kit Macos<6.3.0
Zoom Meeting Software Development Kit Windows<6.3.0
Zoom Rooms Android<6.3.0
Zoom Rooms Ipados<6.3.0
Zoom Rooms Macos<6.3.0
Zoom Rooms Windows<6.3.0
Zoom Rooms Controller Android<6.3.0
Zoom Rooms Controller Linux<6.3.0
Zoom Rooms Controller Macos<6.3.0
Zoom Rooms Controller Windows<6.3.0
Zoom Workplace Android<6.3.0
Zoom Workplace Iphone Os<6.3.0
Zoom Workplace Desktop Linux<6.3.0
Zoom Workplace Desktop Macos<6.3.0
Zoom Workplace Desktop Windows<6.3.0
Zoom Workplace Virtual Desktop Infrastructure Windows<6.1.16
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.1.17<6.2.12
Event History
Mar 11, 2025
CVE Published
via MITRE·05:11 PM
Data Sourced
via MITRE·05:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-27440?
CVE-2025-27440 has been classified as a high-severity vulnerability due to its potential to allow privilege escalation.
2
How do I fix CVE-2025-27440?
To remediate CVE-2025-27440, update your Zoom Workplace Apps to the latest version as provided in the security bulletin.
3
Who is affected by CVE-2025-27440?
Authenticated users of Zoom Workplace Apps are at risk of CVE-2025-27440 if they have network access.
4
What type of vulnerability is CVE-2025-27440?
CVE-2025-27440 is classified as a heap overflow vulnerability that can lead to escalation of privilege.
5
When was CVE-2025-27440 discovered?
CVE-2025-27440 was identified in 2025, highlighting the importance of keeping software up to date.