The ZTE Cloud PC client uSmartview contains a vulnerability identified as CWE‑134, which typically represents a format‑string issue, though the description only notes memory corruption. This flaw can be exploited remotely, leading to a crash of the client process and denial of service.

Affected systems include ZTE’s Cloud PC Client, known as uSmartview, that runs on the ZTE:ZXCLOUD iRAI platform. No specific product versions are listed as vulnerable, implying that all releases of the client before the vendor fix are potentially affected.

The CVSS score of 4.7 denotes a moderate severity. Because the flaw can be triggered remotely, the expected attack vector is network‑based. The EPSS score of 0.00043 (below 1%) indicates a very low probability of active exploitation in the wild, and the vulnerability is not listed in CISA’s KEV catalog, further suggesting limited public use. Nonetheless, an attacker that can send specially crafted data to the client could cause memory corruption that crashes the process and denies service to legitimate users. The associated CWE‑134 indicates a format‑string weakness; while the description does not explicitly confirm the exact flaw type, the reported memory corruption is consistent with such an issue.