CVSS 9.4 (critical) · published 2026-09-30
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a denial of service. A crafted media stream may result in a controlled abort during processing, and has the potential to achieve memory corruption.
Affected products (NVD): pexip pexip_infinity
Fixed in (NVD): 38.2
Weakness: CWE-787
Source: NVD CVE-2026-103109
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.