ZOOMSDAY CVE-2026-53414 Zoom Annotation AddObj Spray Burst (592-byte ExtChild)

Duo Tech@duotech

•updated Aug 17, 2026•0•0•3

Suricata signature chain detecting a burst of 20+ 592-byte ExtChild AddObj annotation messages from a single source within 5 seconds (heap-spray pattern), followed by a RemoveObj/ModifyObj teardown operation consistent with dispatch through a corrupted vtable pointer — the full CVE-2026-53414 heap overflow and control-flow hijack chain.