CVE-2025-66379

Published: Dic 25, 2025 Last Modified: Gen 05, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high

Description

AI Translation Available

Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting in a denial of service.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0014
Percentile
0,3th
Updated

EPSS Score Trend (Last 81 Days)

617

Reachable Assertion

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Availability
Potential Impacts:
Dos: Crash, Exit, Or Restart
Applicable Platforms
Languages: C, Java, Not Language-Specific, Rust
View CWE Details
Application

Pexip Infinity by Pexip

Product Information
Vendor Pexip
Product Pexip Infinity
Version Range Affected
To 39.0 (exclusive)
cpe:2.3:a:pexip:pexip_infinity:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://docs.pexip.com/admin/security_bulletins.htm
https://docs.pexip.com/admin/security_bulletins.htm