CVE-2022-36928

Name of the Vulnerable Software and Affected Versions Zoom for Android versions prior to 5.13.0

Description The issue is related to incorrect restriction of the path name to a directory with limited access, allowing a third-party app to exploit this and read and write to the Zoom application data directory.

Recommendations For versions prior to 5.13.0, update to version 5.13.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Zoom application data directory to minimize the risk of exploitation.