Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
- ID
- 13268
- Status
- summarized
- Published
- 12 Aug 2026, 3:08 AM
- Fetched
- 12 Aug 2026, 4:55 AM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/08/zoom-annotation-flaws-could-let-meeting.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 6.5
- Created
- 12 Aug 2026, 5:01 AM
- Tags
- Audience
- developersai_ml_learnerssaas_founders
What happened
Three Zoom annotation-tool flaws allowed any meeting participant to hijack another attendee's client with no victim interaction—no click, download, or prompt required. Patches shipped in June and July 2026 (Zoom Workplace before 7.1.5/7.0.6, VDI Client before 7.0.11/6.6.16, Rooms/SDK before 7.1.0/7.1.5), with no exploitation reported. Researcher 'A Security' claims they went from finding the flaw to a working exploit in under a day using fewer than 20 prompts on unnamed publicly available AI models, exploiting a 128-byte buffer overflow in annotation data parsing and a missing origin check that let one malformed drawing reach the entire room.
Why it matters
If your team runs Zoom Workplace, VDI Client, Rooms, or embeds the Meeting SDK, verify you are past the patched versions—older clients remain exploitable by anyone in a meeting with zero victim interaction. The AI-assisted exploit claim (under 20 prompts, under a day) is unverifiable since no model is named, but it signals that offensive security tooling is cheapening fast; builders shipping client software with binary protocol parsing should treat untrusted-length-field bugs as findable by adversaries with minimal effort.
Discussion angle
The technical writeup is one-sided—Zoom published no detail and rates the bugs lower than the researcher—so discuss how much weight to give an unverifiable 'AI found this in 20 prompts' claim from a startup that just raised $37M and has a vested interest in looking formidable, versus the concrete buffer-overflow and missing-origin-check mechanics that are independently plausible.