CVE-2026-53413

Name of the Vulnerable Software and Affected Versions Zoom Clients (affected versions not specified)

Description A missing bounds check in the annotator function allows a buffer over-write. This issue occurs due to a 32-bit width x height overflow in a native video receive worker. A meeting participant can exploit this via network access to achieve remote code execution on another participant's device. While a server-side mitigation exists to filter malicious messages, it is ineffective for end-to-end encrypted (E2EE) meetings because the server cannot inspect the call content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.