CVE-2025-66379CWE-617

CVE-2025-66379

High · published December 25, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.0
In the wild
Unconfirmed
What it is

⚡ A sneaky twist in Pexip Infinity could let a remote attacker hit the emergency stop button! 😱 Think of it like a restaurant where a mischievous diner sends back a dish just to create chaos in the kitchen — one cleverly crafted media stream could cause the whole system to crash, ruining the dining experience for everyone. 🍽️ If exploited, this vulnerability could lead to a denial of service, causing the application to crash and making it unavailable when you need it most. Users may face interruptions during crucial video conferences or communications, leading to frustration and lost productivity. This could be a real headache for any business relying on Pexip Infinity!

Put simply

Think of it like a restaurant where a mischievous diner sends back a dish just to create chaos in the kitchen — one cleverly crafted media stream could cause the whole system to crash, ruining the dining experience for everyone. 🍽️ The issue arises from improper input validation within the media implementation of Pexip Infinity versions before 39.0. An attacker can send a malicious media stream, prompting the software to abort, thus resulting in a denial of service.

What to do

If exploited, this vulnerability could lead to a denial of service, causing the application to crash and making it unavailable when you need it most. Users may face interruptions during crucial video conferences or communications, leading to frustration and lost productivity. This could be a real headache for any business relying on Pexip Infinity! To protect against this vulnerability, upgrade Pexip Infinity to version 39.0 or later immediately. Additionally, consider implementing monitoring to detect and respond to unusual media streams that could indicate an attack. 🛡️ You've got this! Following these steps will help you keep your systems secure and reliable. 💪✨

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00372 · 30.0th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2025-12-25T10:16Z
Affected products (1)
ProductVersionsFixed in
pexip/pexip_infinity< 39.039.0
References (1)
EPSS history
Timeline
  • 25 DEC 00:00Z
    Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted…
    cvelistv5