Improper Input Validation in Pexip Infinity by Pexip
CVE-2025-48704

7.5HIGH

Key Information:

Vendor

Pexip

Status
Vendor
CVE Published:
25 December 2025

What is CVE-2025-48704?

Pexip Infinity versions 35.0 through 37.2 prior to 38.0 contain a flaw due to improper input validation in the signaling process. This vulnerability may be exploited by attackers to induce a software abort, leading to a denial of service condition. It is critical for users and administrators of Pexip Infinity to apply the necessary updates to prevent potential disruptions and ensure system integrity.

Affected Version(s)

Infinity 35.0 < 38.0

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-48704 : Improper Input Validation in Pexip Infinity by Pexip