CVE-2025-30668

MEDIUM

Zoom Meeting Software Development Kit < 6.4.0 - Integer Underflow

Title source: rule

Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.

CVSS v3 6.5

EPSS 0.0031

EPSS Percentile 54.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-191

Status published

Products (6)

zoom/meeting_software_development_kit < 6.4.0 (4 CPE variants)

zoom/rooms < 6.4.0 (4 CPE variants)

zoom/rooms_controller < 6.4.0 (4 CPE variants)

zoom/workplace < 6.4.0

zoom/workplace_desktop < 6.4.0 (3 CPE variants)

zoom/workplace_virtual_desktop_infrastructure < 6.1.17

Published May 14, 2025

Tracked Since Feb 18, 2026