Infinity
by Pexip
CVEs (62)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-32096 | Hig | 0.49 | 7.5 | 0.00 | Dec 25, 2025 | Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a denial of service. | ||
| CVE-2025-32095 | Hig | 0.49 | 7.5 | 0.00 | Dec 25, 2025 | Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a denial of service. | ||
| CVE-2025-30080 | Hig | 0.49 | 7.5 | 0.01 | Apr 2, 2025 | Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service (software abort). | ||
| CVE-2024-37917 | Hig | 0.49 | 7.5 | 0.00 | Apr 2, 2025 | Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (software abort) via a crafted signalling message. | ||
| CVE-2023-31455 | Hig | 0.49 | 7.5 | 0.01 | Dec 25, 2023 | Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort. | ||
| CVE-2023-31289 | Hig | 0.49 | 7.5 | 0.01 | Dec 25, 2023 | Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort. | ||
| CVE-2022-32263 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719. | ||
| CVE-2022-29286 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling. | ||
| CVE-2022-27937 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264. | ||
| CVE-2022-27936 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323. | ||
| CVE-2022-27935 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth. | ||
| CVE-2022-27934 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP. | ||
| CVE-2022-27932 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. | ||
| CVE-2022-27931 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol. | ||
| CVE-2022-27929 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP. | ||
| CVE-2022-27928 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol. | ||
| CVE-2022-26657 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. | ||
| CVE-2022-26655 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a software abort via a gateway call into Teams. | ||
| CVE-2022-26654 | Hig | 0.49 | 7.5 | 0.01 | Jul 17, 2022 | Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP. | ||
| CVE-2022-23228 | Hig | 0.49 | 7.5 | 0.01 | Feb 18, 2022 | Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service. |
- risk 0.49cvss 7.5epss 0.00
Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a denial of service.
- risk 0.49cvss 7.5epss 0.00
Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a denial of service.
- risk 0.49cvss 7.5epss 0.01
Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service (software abort).
- risk 0.49cvss 7.5epss 0.00
Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (software abort) via a crafted signalling message.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a software abort via a gateway call into Teams.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP.
- risk 0.49cvss 7.5epss 0.01
Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service.
Page 2 of 4