Division by zero in Zoom Video Communications, Inc. products - CVE-2024-27239

Vulnerability identifier: #VU91692

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-27239

CWE-ID: CWE-369

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Zoom Video Communications, Inc.

Affected software:
Zoom Workplace Desktop App for Windows
Zoom Workplace Desktop App for macOS
Zoom Workplace Desktop App for Linux
Zoom Workplace App for Android
Zoom Workplace App for iOS

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a divide by zero error. A remote attacker can pass specially crafted data to the application and crash it.

Install updates from vendor's website.

• https://www.zoom.com/en/trust/security-bulletin/ZSB-24018/