This vulnerability in ZoomIt ZoomSounds (<= 6.91) involves unsafe deserialization of untrusted data, enabling an attacker to perform object injection. This can result in remote code execution or other severe impacts due to the manipulation of serialized objects. The vulnerability is exploitable remotely without authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). No known exploits in the wild have been reported yet.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure of information, modification of data, and disruption of service. The vulnerability affects all users running vulnerable versions of ZoomSounds, potentially allowing remote attackers to execute arbitrary code or cause denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the ZoomSounds plugin if feasible, or applying any recommended temporary mitigations from the vendor once available. Monitor vendor channels for updates.