Go/github.com/pion/interceptor CVE-2025-49140: high 7.5, EPSS 0.49%
Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS) in github.com/pion/interceptor
Action: Upgrade github.com/pion/interceptor to 0.1.39 or later.
go get github.com/pion/interceptor@v0.1.39Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.36 | 0.1.39 | - |
Fixed versions
| 0.1.39 |
Sources
- osv: GO-2025-3748
- nvd: CVE-2025-49140
- https://github.com/pion/interceptor/security/advisories/GHSA-f26w-gh5m-qq77
- https://github.com/pion/interceptor/commit/fa5b35ea867389cec33a9c82fffbd459ca8958e5
- https://github.com/pion/interceptor/pull/338
- https://github.com/pion/webrtc/issues/3148
CVE-2025-49140 · published · modified · JSON