CVE-2022-22780 is a vulnerability in Zoom Meetings
Published on February 9, 2022
Zoom Chat Susceptible to Zip Bombing
The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before version 5.6.3. This could lead to availability issues on the client host by exhausting system resources.
Vulnerability Analysis
CVE-2022-22780 is exploitable with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a small impact on availability.
Products Associated with CVE-2022-22780
Want to know whenever a new CVE is published for Zoom Meetings? stack.watch will email you.
Affected Versions
Zoom Video Communications Inc Zoom Client for Meetings for Android:- Version unspecified and below 5.8.6 is affected.
- Version unspecified and below 5.9.0 is affected.
- Version unspecified and below 5.8.6 is affected.
- Version unspecified and below 5.7.3 is affected.
- Version unspecified and below 5.6.3 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.