This vulnerability, identified as CWE-229 (Improper Handling of Values), exists in Zscaler Client Connector on Android and ChromeOS platforms. It allows a local attacker to trigger a buffer overflow, resulting in a denial-of-service condition. The CVSS 3.1 score is 8.4, indicating high severity with impact on confidentiality, integrity, and availability. The vulnerability requires local access and no privileges or user interaction. No vendor advisory or patch information is currently available.

Successful exploitation can cause a denial-of-service on affected devices by triggering a buffer overflow. The CVSS vector indicates high impact on confidentiality, integrity, and availability, though the attack is local and requires no privileges or user interaction. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit local access to trusted users and monitor for unusual application behavior. Follow vendor updates for official patches or mitigations.