CVE-2026-103109

HIGH

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a denial of service. A crafted media stream may result in a controlled abort during processing, and has the potential to achieve memory corruption.

CVSS v3.1 Score

7.7
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Attack Vector
NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
HIGH
Published: 9/30/2026Modified: 10/5/2026

Related Intelligence (1)

CRITICALVulnerability

NVD CRITICAL: CVE-2026-103109 — Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper in...

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a denial of service. A crafted media stream may result in a controlled abort during processing, and has the potential to achieve memory corruption.

CVE-2026-103109
NIST NVD

References (1)

https://docs.pexip.com/admin/security_bulletins.htmVendor Advisory