CVE-2025-46789 Zoom Clients for Windows - Classic Buffer Overflow

What is CVE-2025-46789?

CVE-2025-46789 is a medium-severity memory corruption vulnerability in Zoom Zoom, published on 10 Jul 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.

Weakness: CWE-120

Which versions are affected by CVE-2025-46789?

It affects 1 product.

Products include Zoom Zoom.

How do I fix CVE-2025-46789?

No fix has been published for CVE-2025-46789 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-46789 being exploited?

There is no known exploitation of CVE-2025-46789 in the wild and no public exploit code.

Other vulnerabilities in Zoom Zoom

• CVE-2018-15715 Missing authorization in Zoom Critical 9.8
• CVE-2023-39216 Cross-site scripting in Zoom Desktop Client for Windows Critical 9.6
• CVE-2023-36534 Path traversal in Zoom Desktop Client for Windows Critical 9.3
• CVE-2019-13567 Command injection in n/a High 8.8
• CVE-2017-15048 Memory corruption in n/a High 8.8

All Zoom Zoom vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3pc8-q9qj-vmvc.