CVE-2021-34424

Process memory exposure in Zoom Client and other products

HIGH

7.5

CVSS Score

Published: November 24, 2021 at 04:54 PM UTC

Updated: June 17, 2026 at 03:55 AM UTC

44 products affected across 2 vendorsMeetingsVirtual Desktop InfrastructureOn-Premise Meeting Connector MMR· also runs on 5 platforms

Using Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) by Zoom Video Communications Inc?

Get instant alerts when new vulnerabilities affect Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 2%

Description

A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom on-premise Meeting Connector before version 4.8.12.20211115, Zoom on-premise Meeting Connector MMR before version 4.8.12.20211115, Zoom on-premise Recording Connector before version 5.1.0.65.20211116, Zoom on-premise Virtual Room Connector before version 4.4.7266.20211117, Zoom on-premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64 which potentially allowed for the exposure of the state of process memory. This issue could be used to potentially gain insight into arbitrary areas of the product's memory.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android Meeting SDK · Zoom

95%

v < 5.7.6.1922

Affected range stops below 5.7.6.1922, so it looks safe — our inference, not a vendor statement

Android Video SDK · Zoom

95%

v < 1.1.2

Affected range stops below 1.1.2, so it looks safe — our inference, not a vendor statement

Controllers for Zoom Rooms · Zoom

95%

v < 5.8.3

Affected range stops below 5.8.3, so it looks safe — our inference, not a vendor statement

apple-iphone-os (environment) · google-android (environment) · microsoft-windows (environment)

Hybrid Mmr · Zoom

95%

v < 4.6.20211116.131

Affected range stops below 4.6.20211116.131, so it looks safe — our inference, not a vendor statement

Hybrid Zproxy · Zoom

95%

v < 1.0.1058.20211116

Affected range stops below 1.0.1058.20211116, so it looks safe — our inference, not a vendor statement

iPhone OS Meeting SDK · Zoom

95%

v < 5.7.6.1082

Affected range stops below 5.7.6.1082, so it looks safe — our inference, not a vendor statement

iPhone OS Video SDK · Zoom

95%

v < 1.1.2

Affected range stops below 1.1.2, so it looks safe — our inference, not a vendor statement

macOS Meeting SDK · Zoom

95%

v < 5.7.6.1340

Affected range stops below 5.7.6.1340, so it looks safe — our inference, not a vendor statement

macOS Video SDK · Zoom

95%

v < 1.1.2

Affected range stops below 1.1.2, so it looks safe — our inference, not a vendor statement

Meetings · Zoom

95%

v < 5.8.3v < 5.8.4

Affected range stops below 5.8.3, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.8.4, so it looks safe — our inference, not a vendor statement

apple-iphone-os (environment) · apple-macos (environment) · google-android (environment) · linux-linux-kernel (environment) · microsoft-windows (environment)