CVE-2023-43583: 
NixOS vulnerability analysis and mitigation

CVE-2023-43583 is a cryptographic vulnerability affecting Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS in versions before 5.16.0. The vulnerability was disclosed on December 13, 2023, and was reported by the Zoom Offensive Security Team (Zoom Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 4.9 (Medium severity) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires network access and high privileges to exploit, requires no user interaction, and can potentially lead to high confidentiality impact without affecting integrity or availability (NVD).

The vulnerability could allow a privileged user to conduct disclosure of information through network access. The impact is limited to information disclosure without affecting system integrity or availability (Zoom Advisory).

Users are advised to update to Zoom Mobile App and SDK version 5.16.0 or later. The fix is available through the official Zoom download page. Users can help keep themselves secure by applying current updates or downloading the latest Zoom software with all current security updates (Zoom Advisory).