CVE-2021-34423

CVE-2021-34423 describes a buffer overflow in Zoom products (client and MMR server components) due to insecure deserialization of a blob in the Zoom messaging path. The issue arises when deserializing packets where a length field is read to allocate a buffer, then a second length is read and used...

CVE-2021-34424

The CVE-2021-34424 entry concerns Zoom products (client and MMR servers) prior to versions around 5.8.x with a memory exposure/info-leak in deserialized data (ssb::variant_t) that could reveal heap/pointer data. The connected sources confirm the vulnerability’s existence, affected components, and...

CVE-2021-34417

The CVE-2021-34417 entry affects multiple Zoom On‑Premise components: Controller, MMR, Recording Connector, Virtual Room Connector, and Load Balancer, with vulnerable versions prior to 4.6.365.20210703 (Controller/MMR/Recording Connector) or 4.4.6868.20210703 (Virtual Room Connector) and 2.5.5496...

CVE-2021-34418

CVE-2021-34418 affects multiple Zoom On-Premise components. The login routine of the web console for the Zoom On-Premise Meeting Connector (before 4.6.239.20200613), Meeting Connector MMR (before 4.6.239.20200613), Recording Connector (before 3.8.42.20200905), Virtual Room Connector (before 4.4.6...