Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Zoom Workplace Apps: Authenticated User Can Crash Some Services

CVE-2025-30668 · published 1 year ago
Summary

Authenticated users of Zoom Workplace Apps may be able to crash certain services, causing service disruptions. This is a concern because it could lead to downtime and impact productivity. Zoom has addressed this issue, so users should consider updating their software to the latest version.

What to do
  • Update zoom meeting_software_development_kit to version 6.4.0 or later.
  • Update zoom rooms to version 6.4.0 or later.
  • Update zoom rooms_controller to version 6.4.0 or later.
  • Update zoom workplace to version 6.4.0 or later.
  • Update zoom workplace_desktop to version 6.4.0 or later.
Affected software
VendorProductAffected versions
zoom meeting_software_development_kit < 6.4.0
cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*
zoom rooms < 6.4.0
cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*
zoom rooms_controller < 6.4.0
cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*
zoom workplace < 6.4.0
cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*
zoom workplace_desktop < 6.4.0
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*
zoom workplace_virtual_desktop_infrastructure < 6.1.17
>= 6.1.18, < 6.2.13
>= 6.2.14, < 6.3.10
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
Original advisory text
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-191Integer Underflow (Wrap or Wraparound)
Timeline
Published14 May 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-30668 · NVD
Track software like this
Free during beta