High · published September 30, 2026
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a denial of service. A crafted media stream may result in a controlled abort during processing, and has the potential to achieve memory corruption.
| Product | Versions | Fixed in |
|---|---|---|
| pexip/pexip_infinity | < 38.2 | 38.2 |
| pexip/pexip_infinity | ≥ 39.0, ≤ 39.1 | — |
| pexip/pexip_infinity | all versions | — |