Main Vulnerability Database Vulnerabilities #VU112514

Insufficient Control Flow Management in Zoom Video Communications, Inc. products - CVE-2025-49463

Published: July 8, 2025

Vulnerability identifier: #VU112514

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-49463

CWE-ID: CWE-691

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient control flow management. A remote attacker can gain access to sensitive information.

Zoom Workplace App for iOS
Zoom Rooms Client for iPad
Zoom Meeting SDK for iOS

Install updates from vendor's website.

Zoom Workplace App for iOS - update to 6.4.5 24064
Zoom Meeting SDK for iOS - update to 6.4.5
Zoom Rooms Client for iPad - update to 6.4.5