Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-22780

Zoom Chat Susceptible to Zip Bombing

Description

The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before version 5.6.3. This could lead to availability issues on the client host by exhausting system resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zoom Video Communications Inc Zoom Client for Meetings for Android

  • unspecified to < 5.8.6affected

Zoom Video Communications Inc Zoom Client for Meetings for iOS

  • unspecified to < 5.9.0affected

Zoom Video Communications Inc Zoom Client for Meetings for Linux

  • unspecified to < 5.8.6affected

Zoom Video Communications Inc Zoom Client for Meetings for macOS

  • unspecified to < 5.7.3affected

Zoom Video Communications Inc Zoom Client for Meetings for Windows

  • unspecified to < 5.6.3affected

References