High · published December 25, 2025
⚡ An improperly validated input in Pexip Infinity can lead to a software abort, popping the service like an unexpected popcorn kernel! 🍿 Think of this like a restaurant that serves customers based on their orders but fails to double-check if the orders make sense. One rogue order can cause chaos in the kitchen, leading to a temporary halt in service while they figure out what's gone wrong. An attacker could exploit this vulnerability to send a crafted signal, causing the service to crash and resulting in a temporary denial of service. This could leave users unable to connect, creating a frustrating experience for everyone dependent on real-time communications. Imagine a crucial video call that suddenly goes dark!
Think of this like a restaurant that serves customers based on their orders but fails to double-check if the orders make sense. One rogue order can cause chaos in the kitchen, leading to a temporary halt in service while they figure out what's gone wrong. This vulnerability stems from improper input validation in the signaling process for WebRTC in Pexip Infinity versions 35.0 to 38.1. When Direct Media is configured, an attacker can trigger a software abort resulting in service disruption without any authentication required.
An attacker could exploit this vulnerability to send a crafted signal, causing the service to crash and resulting in a temporary denial of service. This could leave users unable to connect, creating a frustrating experience for everyone dependent on real-time communications. Imagine a crucial video call that suddenly goes dark! To safeguard your service, upgrade Pexip Infinity immediately to version 39.0 or later. Review and harden any configurations not set to defaults, especially those using Direct Media for WebRTC. Regularly monitor your services for any suspicious signaling activity. You've got this! By taking these steps, you're on your way to securing your communications like a pro! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| pexip/pexip_infinity | ≥ 35.0, < 39.0 | 39.0 |