CVE-2025-66379 | THREATINT

Description

Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting in a denial of service.

PUBLISHED Reserved 2025-11-28 | Published 2025-12-25 | Updated 2025-12-26 | Assigner mitre

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Problem types

CWE-617 Reachable Assertion

Product status

Default status

unaffected

Any version before 39.0

affected

References

docs.pexip.com/admin/security_bulletins.htm

cve.org (CVE-2025-66379)

nvd.nist.gov (CVE-2025-66379)

Download JSON