CVE-2022-28750

—

CVSS 3.1

9.8 critical

EPSS

2%p79

Published

Aug 11, 2022 (Aug 11, 2022)

Modified

Jun 17, 2026

Description

Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the application. In versions older than 4.8.12.20211115, this vulnerability could also be leveraged to execute arbitrary code.

Vendors: zoom
Products: meeting connector
Weakness: CWE-121, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news1 stories

Zoom fixed 2 flaws in macOS App that were disclosed at DEF CON

Security AffairsAug 17, 06:57 UTC · Aug 17, 2022Vulnerability CVE-2022-28756 CVE-2022-28751 CVE-2022-28753+4 CVEs