Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a temporary denial of service.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://docs.pexip.com/admin/security_bulletins.htm |
|
History
Thu, 25 Dec 2025 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a temporary denial of service. | |
| First Time appeared |
Pexip
Pexip infinity |
|
| Weaknesses | CWE-617 | |
| CPEs | cpe:2.3:a:pexip:infinity:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Pexip
Pexip infinity |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-12-25T04:50:33.288Z
Reserved: 2025-12-01T00:00:00.000Z
Link: CVE-2025-66443
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-12-25T05:16:09.803
Modified: 2025-12-25T05:16:09.803
Link: CVE-2025-66443
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses