CVE-2025-66443

Medium · 5.3

CVSS

5.3

EPSS

0.3%

Published

Dec 25, 2025

CISA due date

—

The record

Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a temporary denial of service.

Affected packages

Ecosystem	Package	Introduced	Fixed