The ZTE Cloud PC client uSmartview contains a format‑string vulnerability (CWE‑134) that can be exploited remotely. The flaw may cause memory corruption which in turn triggers a crash of the client process. An attacker that can send a specially crafted input to the client would be able to deny service to legitimate users.

Affected systems include ZTE’s Cloud PC Client, known as uSmartview, that runs on the ZTE:ZXCLOUD iRAI platform. No specific product versions are listed as vulnerable, implying that all releases of the client before the vendor fix are potentially affected.

The CVSS score of 4.7 indicates a moderate impact. Because the exploit requires remote interaction with the client, the attack vector is likely remote over the network. No EPSS information is available and the issue is not listed in the CISA KEV catalog, which suggests limited public exploitation. Nonetheless, attackers could still use the flaw to disrupt service in environments that rely heavily on uninterrupted access to the Cloud PC client.