# Possible security bug on Zoom Video SDK and React Native

**URL:** <https://devforum.zoom.us/t/possible-security-bug-on-zoom-video-sdk-and-react-native/100376>\
**Category:** React Native\
**Created:** [December 18, 2023, 7:24pm UTC](https://devforum.zoom.us/t/possible-security-bug-on-zoom-video-sdk-and-react-native/100376 "2023-12-18T19:24:55Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![DanPiccolo](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/danpiccolo/32/41394_2.png) [@DanPiccolo](https://devforum.zoom.us/u/DanPiccolo)\
**Post date:** [December 18, 2023, 7:24pm UTC](https://devforum.zoom.us/t/possible-security-bug-on-zoom-video-sdk-and-react-native/100376/1 "2023-12-18T19:24:55Z")

</div>

### Before Creating a New Topic:

_If you’re experiencing unexpected Video SDK behavior please search the forum with relevant keywords (e.x. error message) and follow the guidance outlined in those posts. Please also leverage the following support links:_

- Zoom Developer Changelog for Dev Product Changes: [https://marketplace.zoom.us/docs/guides/stay-up-to-date/changelog/](https://marketplace.zoom.us/docs/guides/stay-up-to-date/changelog/)
- General Troubleshooting: [Support](https://devsupport.zoom.us/hc/en-us)
- To Submit a Ticket for Unexpected Video SDK Behavior: [Official Zoom Support | Help Center](https://support.zoom.us/hc/en-us)
- For General & Integrations Related Guidance: [https://community.zoom.com/](https://community.zoom.com/)

* * *

**Description**  
I’m integrating the Zoom Video SDK with a react native mobile app. However, my mobile app is crashing occasionally. BUT the camera on an Android device, still seems to send video to the zoom session (using the web ui version of the Video SDK)

**Errors**  
There is no clear stack trace except for this error that appears on the mobile app at the time of it crashing

 ![Screenshot_20231218-152854_Fonemed](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/9/9/99985211db928b9ba289747092f6cd4114730b5a.jpeg)

**Which React Native Video SDK version?**  
Version 1.9.5

**Video SDK Code Snippets**  
No valid code snippet to show

**Smartphone (please complete the following information):**

- Device: Samsung Galaxy S7
- OS: Android 8

---

<div class="post-metadata">

**Author:** ![rehema.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rehema.zoom/32/40323_2.png) [@rehema.zoom](https://devforum.zoom.us/u/rehema.zoom)\
**Post date:** [December 20, 2023, 12:27am UTC](https://devforum.zoom.us/t/possible-security-bug-on-zoom-video-sdk-and-react-native/100376/2 "2023-12-20T00:27:56Z")

</div>

Hi @DanPiccolo ,

Thank you for sharing this. I will have the team look into this further and reach back out when I have an update.

Thank you,  
Rehema

---

<div class="post-metadata">

**Author:** ![rehema.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rehema.zoom/32/40323_2.png) [@rehema.zoom](https://devforum.zoom.us/u/rehema.zoom)\
**Post date:** [December 20, 2023, 3:46pm UTC](https://devforum.zoom.us/t/possible-security-bug-on-zoom-video-sdk-and-react-native/100376/3 "2023-12-20T15:46:28Z")

</div>

Hi @DanPiccolo ,

To make sure we can best investigate this issue, are you able to reproduce this on the react native sample app? If so, can you provide the steps to reproduce?

Thanks,  
Rehema

---

<div class="post-metadata">

**Author:** ![DanPiccolo](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/danpiccolo/32/41394_2.png) [@DanPiccolo](https://devforum.zoom.us/u/DanPiccolo)\
**Post date:** [December 20, 2023, 4:02pm UTC](https://devforum.zoom.us/t/possible-security-bug-on-zoom-video-sdk-and-react-native/100376/4 "2023-12-20T16:02:02Z")

</div>

Sorry, no, this was with our own app, not the sample app.

I was using something a 3rd party wrote for our project, (which I was trying to tweak as they had diverged a bit from the sample app) and it was an issue with null/undefined values for sharing status in the React Native zoom component, it seems, and it would join the session, start transmitting, but then close the app, and the video would still stream to the web client I was using to complete create the session in the first place.

This is the error the app gave me (see below) and my thought is, a person could willingly cause this error in order to exploit this issue.

 ![](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/9/9/99985211db928b9ba289747092f6cd4114730b5a.jpeg)

![efNuQF78ASZdfmdA.png](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/1/9/199a8087da052d342f10c6890c0cca612115aba3.png)

---

<div class="post-metadata">

**Author:** ![rehema.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rehema.zoom/32/40323_2.png) [@rehema.zoom](https://devforum.zoom.us/u/rehema.zoom)\
**Post date:** [December 20, 2023, 8:50pm UTC](https://devforum.zoom.us/t/possible-security-bug-on-zoom-video-sdk-and-react-native/100376/5 "2023-12-20T20:50:54Z")

</div>

Hi @DanPiccolo ,

Thanks for your response. Could you attempt to test on the [sample application](https://developers.zoom.us/docs/video-sdk/react-native/get-started/) and see if the issue still occurs? In this instance, it would require to manually crash/end the application to test and see if video is still being sent. Please let me know if you are able to reproduce on the sample app or need any guidance in testing.

Thanks,  
Rehema

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [January 17, 2024, 7:25pm UTC](https://devforum.zoom.us/t/possible-security-bug-on-zoom-video-sdk-and-react-native/100376/6 "2024-01-17T19:25:38Z")

</div>

This topic was automatically closed after 30 days. New replies are no longer allowed.
