CVE-2025-66379

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Dec 25, 2025

CISA due date

—

The record

Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting in a denial of service.

Affected packages

Ecosystem	Package	Introduced	Fixed