{"metadata": {"vulnerability": "cve-2025-49140", "count": 23, "kinds": {"milestone": 6, "sighting": 3, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-06-02T10:39:41.634Z", "date_only": false, "value": "2025-06-02T10:39:41.634Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-49140", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-09T17:17:11.502Z", "date_only": false, "value": "2025-06-09T17:17:11.502255Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pion.ly/post/3lr6uzl55x22n", "record": "CVE-2025-49140", "field": "creation_timestamp", "uuid": "bb950c39-6f3f-4aa3-a108-613b1d93d152", "url": "https://bsky.app/profile/pion.ly/post/3lr6uzl55x22n"}, {"timestamp": "2025-06-09T20:29:40Z", "date_only": false, "value": "2025-06-09T20:29:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F26W-GH5M-QQ77", "record": "GHSA-F26W-GH5M-QQ77", "field": "published"}, {"timestamp": "2025-06-09T21:13:12.388Z", "date_only": false, "value": "2025-06-09T21:13:12.388Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-49140", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-09T21:13:12.388Z", "date_only": false, "value": "2025-06-09T21:13:12.388Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-49140", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-09T21:31:55Z", "date_only": false, "value": "2025-06-09T21:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17781", "record": "CVE-2025-49140", "field": "creation_timestamp", "uuid": "7328b9b9-bac4-4f3f-9394-e5cda78c9007", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49140\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should upgrade to v0.1.39 or later, which validates that: `padLen > 0 && padLen <= payloadLength` and return error  on overflow, avoiding panic. If upgrading is not possible, apply the patch from the pull request manually or drop packets whose P-bit is set but whose padLen is zero or larger than the remaining payload.\n\ud83d\udccf Published: 2025-06-09T21:13:12.388Z\n\ud83d\udccf Modified: 2025-06-09T21:13:12.388Z\n\ud83d\udd17 References:\n1. https://github.com/pion/interceptor/security/advisories/GHSA-f26w-gh5m-qq77\n2. https://github.com/pion/webrtc/issues/3148\n3. https://github.com/pion/interceptor/pull/338\n4. https://github.com/pion/interceptor/commit/fa5b35ea867389cec33a9c82fffbd459ca8958e5", "url": "https://t.me/DarkWebInformer_CVEAlerts/17781"}, {"timestamp": "2025-06-09T22:15:00Z", "date_only": false, "value": "2025-06-09T22:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-49140", "record": "UBUNTU-CVE-2025-49140", "field": "published"}, {"timestamp": "2025-06-09T22:15:22Z", "date_only": false, "value": "2025-06-09T22:15:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F26W-GH5M-QQ77", "record": "GHSA-F26W-GH5M-QQ77", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-09T22:15:22.153Z", "date_only": false, "value": "2025-06-09T22:15:22.153", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49140", "record": "FKIE_CVE-2025-49140", "field": "published"}, {"timestamp": "2025-06-09T23:53:17.527Z", "date_only": false, "value": "2025-06-09T23:53:17.527458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr7l6e3azl2u", "record": "CVE-2025-49140", "field": "creation_timestamp", "uuid": "372f7951-4e89-47b5-88cc-2ed42d7682ab", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr7l6e3azl2u"}, {"timestamp": "2025-06-10T14:45:07Z", "date_only": false, "value": "2025-06-10T14:45:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F26W-GH5M-QQ77", "record": "GHSA-F26W-GH5M-QQ77", "field": "modified"}, {"timestamp": "2025-06-10T20:04:30.298Z", "date_only": false, "value": "2025-06-10T20:04:30.298657Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-49140", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-10T20:04:30.298Z", "date_only": false, "value": "2025-06-10T20:04:30.298657Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49140", "record": "FKIE_CVE-2025-49140", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-10T20:04:42.050Z", "date_only": false, "value": "2025-06-10T20:04:42.050Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-49140", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-10T20:04:42.050Z", "date_only": false, "value": "2025-06-10T20:04:42.050Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-49140", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15225-1", "record": "OPENSUSE-SU-2025:15225-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15225-1", "record": "OPENSUSE-SU-2025:15225-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15225-1", "record": "OPENSUSE-SU-2025:15225-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15225-1", "record": "OPENSUSE-SU-2025:15225-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-20T15:22:53Z", "date_only": false, "value": "2026-05-20T15:22:53Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-49140", "record": "UBUNTU-CVE-2025-49140", "field": "modified"}, {"timestamp": "2026-06-17T09:30:48.900Z", "date_only": false, "value": "2026-06-17T09:30:48.900", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49140", "record": "FKIE_CVE-2025-49140", "field": "lastModified"}, {"timestamp": "2026-09-20T21:35:39Z", "date_only": false, "value": "2026-09-20T21:35:39Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15225-1", "record": "OPENSUSE-SU-2025:15225-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:35:39Z", "date_only": false, "value": "2026-09-20T21:35:39Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15225-1", "record": "OPENSUSE-SU-2025:15225-1", "field": "document.tracking.current_release_date"}]}