CVEvulnerability

CVE-2025-49088

5.9 MEDIUM Published 2025-12-25 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2025-12-25
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-617

Description

Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service, allowing a remote attacker to trigger a software abort via a crafted calendar invite, leading to a denial of service.

Affected configurations

• pexip pexip infinity (>= 32.0 < 37.2)

Related

Weakness · CWE (1)

  • CWE-617 Reachable Assertion weakness

References