CVE-2025-32096CWE-617

CVE-2025-32096

High · published December 25, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
22.9
In the wild
Unconfirmed
What it is

⚡ Just one crafty input could crash your Pexip Infinity server! Before version 37.1, a sneaky flaw allows attackers to trigger a software abort, leading to denial of service. 🔥 Think of it like a restaurant where a customer orders a dish that's not on the menu. If the chef isn't prepared for it, everything can come crashing down — pots boiling over, orders lost, and diners left hungry! This vulnerability could allow an attacker to exploit improper input validation, causing the system to crash and leaving users in the dark. Imagine your video conferencing tools suddenly becoming unusable during a crucial meeting — absolutely devastating!

Put simply

Think of it like a restaurant where a customer orders a dish that's not on the menu. If the chef isn't prepared for it, everything can come crashing down — pots boiling over, orders lost, and diners left hungry! In Pexip Infinity versions 33.0 through 37.0, improper input validation in signaling can lead to a software abort, which results in a denial-of-service condition.

What to do

This vulnerability could allow an attacker to exploit improper input validation, causing the system to crash and leaving users in the dark. Imagine your video conferencing tools suddenly becoming unusable during a crucial meeting — absolutely devastating! To protect yourself, immediately update to version 37.1 or later. Additionally, review your input validation processes to ensure they're robust enough to handle unexpected data. Don't skip this fix! You've got this! A quick update can seal the cracks and keep your service running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00312 · 22.9th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2025-12-25T10:16Z
Affected products (1)
ProductVersionsFixed in
pexip/pexip_infinity≥ 33.0, < 37.137.1
References (1)
EPSS history
Timeline
  • 25 DEC 00:00Z
    Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a…
    cvelistv5