CVE-2025-68960CWE-362

Multi-thread race condition vulnerability in the video framework module

High · published January 14, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

⚡ A multi-thread race condition lurks in the video framework module, waiting for the perfect moment to strike! Think of it like two delivery drivers racing to drop off the same package. If they both try to access the same spot at once, chaos erupts—one may miss the delivery window, and the package might end up lost! If exploited, this vulnerability could lead to serious availability issues, essentially throwing a wrench in your video services and leaving users in the dark. Imagine the frustration when a streaming service suddenly goes dark during a crucial moment—absolutely devastating!

Put simply

Think of it like two delivery drivers racing to drop off the same package. If they both try to access the same spot at once, chaos erupts—one may miss the delivery window, and the package might end up lost! This vulnerability arises from a race condition in the multi-threading aspect of the video framework module, allowing multiple threads to manipulate shared data simultaneously without proper synchronization.

What to do

If exploited, this vulnerability could lead to serious availability issues, essentially throwing a wrench in your video services and leaving users in the dark. Imagine the frustration when a streaming service suddenly goes dark during a crucial moment—absolutely devastating! To mitigate this issue, developers should update to the latest version of the video framework module where this race condition is resolved. Thoroughly review your threading implementations to ensure proper synchronization and test for any potential race conditions. Don't wait—make your move now! You've got this! With these steps, you’ll be on your way to securing your video framework and keeping your users happy. 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00094 · 0.6th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-01-14T02:01Z
EPSS history
Timeline
  • 14 JAN 02:01Z
    Multi-thread race condition vulnerability in the video framework module
    cvelistv5