Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Pexip Infinity Software Abort via Malicious Signalling Message

CVE-2025-32095 · published 10 months ago
Summary

Pexip Infinity users are at risk of a temporary system failure if an attacker sends a specially crafted message. This could cause a disruption to video conferencing services, but it is not a data breach or a way to access sensitive information. Pexip has released a software update to fix this issue, so it's essential to keep your software up to date.

What to do
  • Update pexip pexip_infinity to version 37.0 or later.
Affected software
VendorProductAffected versions
pexip pexip_infinity < 37.0
cpe:2.3:a:pexip:pexip_infinity:*:*:*:*:*:*:*:*
Original advisory text
Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a denial of service.
Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a denial of service.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-617Reachable Assertion
Timeline
Published25 Dec 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-32095 · NVD
Track software like this
Free during beta