PT-2025-24565 · Pion · Pion Interceptor

Kmansoft · Published 2025-06-09 · Updated 2025-07-03 · CVE-2025-49140

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pion Interceptor versions v0.1.36 through v0.1.38

Description Pion Interceptor is a framework for building RTP/RTCP communication software. The issue is caused by a bug in the RTP packet factory, which can be exploited by crafted RTP packets to trigger a panic with Pion based SFU. This only affects users that use pion/interceptor. The bug can be exploited by sending crafted RTP packets.

Recommendations For versions v0.1.36 through v0.1.38, upgrade to v0.1.39 or later, which includes a fix that validates padLen > 0 && padLen <= payloadLength and returns an error on overflow, avoiding panic. If upgrading is not possible, apply the patch from the pull request manually or drop packets whose P-bit is set but whose padLen is zero or larger than the remaining payload.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-49140

GHSA-F26W-GH5M-QQ77

GO-2025-3748

OPENSUSE-SU-2025:15225-1

Affected Products

Pion Interceptor

References · 45

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/49xxx/CVE-2025-49140.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-49140 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-49140 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3748 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-49140 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15225-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f26w-gh5m-qq77 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49140 · Security Note
• https://ubuntu.com/security/CVE-2025-49140 · Vendor Advisory
• https://github.com/pion/webrtc/issues/3148 · Note
• https://github.com/pion/interceptor · Note
• https://github.com/pion/interceptor/security/advisories/GHSA-f26w-gh5m-qq77 · Note
• https://github.com/pion/interceptor/pull/338 · Note
• https://github.com/pion/interceptor/commit/fa5b35ea867389cec33a9c82fffbd459ca8958e5 · Note
• https://suse.com/security/cve/CVE-2025-2571 · Note