CVE-2021-344245.3MediumCWE-125

CVE-2021-34424: Process memory exposure in Zoom Client and other products

Zoom Video Communications Inc · Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)

Vendor fix available · Affected: Zoom Video Communications Inc Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.7%probability of exploitation in the next 30 days

77th percentile

050100

Higher than 77% of scored CVEs

5.3MediumCVSS 3.0

LowMediumHighCrit.

DescriptionCVE.org

A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom on-premise Meeting Connector before version 4.8.12.20211115, Zoom on-premise Meeting Connector MMR before version 4.8.12.20211115, Zoom on-premise Recording Connector before version 5.1.0.65.20211116, Zoom on-premise Virtual Room Connector before version 4.4.7266.20211117, Zoom on-premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64 which potentially allowed for the exposure of the state of process memory.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Zoom Video Communications Inc · Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)before 5.8.4
Zoom Video Communications Inc · Zoom Client for Meetings for Blackberry (for Android and iOS)before 5.8.1
Zoom Video Communications Inc · Zoom Client for Meetings for intune (for Android and iOS)before 5.8.4
Zoom Video Communications Inc · Zoom Client for Meetings for Chrome OSbefore 5.0.1
Zoom Video Communications Inc · Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows)before 5.8.3
Zoom Video Communications Inc · Controllers for Zoom Rooms (for Android, iOS, and Windows)before 5.8.3
Zoom Video Communications Inc · Zoom VDI Windows Meeting Clientbefore 5.8.4
Zoom Video Communications Inc · Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64)before 5.8.4.21112
Zoom Video Communications Inc · Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP Thin…before 5.8.4.21112
Zoom Video Communications Inc · Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP Thin…before 5.8.4.21112
Zoom Video Communications Inc · Zoom Meeting SDK for Androidbefore 5.7.6.1922
Zoom Video Communications Inc · Zoom Meeting SDK for iOSbefore 5.7.6.1082
Zoom Video Communications Inc · Zoom Meeting SDK for macOSbefore 5.7.6.1340
Zoom Video Communications Inc · Zoom Meeting SDK for Windowsbefore 5.7.6.1081
Zoom Video Communications Inc · Zoom Video SDK (for Android, iOS, macOS, and Windows)before 1.1.2
Zoom Video Communications Inc · Zoom on-premise Meeting Connectorbefore 4.8.12.20211115
Zoom Video Communications Inc · Zoom on-premise Meeting Connector MMRbefore 4.8.12.20211115
Zoom Video Communications Inc · Zoom on-premise Recording Connectorbefore 5.1.0.65.20211116
Zoom Video Communications Inc · Zoom on-premise Virtual Room Connectorbefore 4.4.7266.20211117
Zoom Video Communications Inc · Zoom on-premise Virtual Room Connector Load Balancerbefore 2.5.5692.20211117

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Out-of-bounds Read · Memory Corruption
Vendor: Zoom Video Communications Inc
Published: November 2021
Band: Possible (1 to 10%), November 2021

CoverageNo articles yet

No CyberSIXT article names CVE-2021-34424 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.