CVE-2025-32095

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Dec 25, 2025

CISA due date

—

The record

Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a denial of service.

Affected packages

Ecosystem	Package	Introduced	Fixed