CVE-2025-32439

Summary

CVE-2025-32439 is a vulnerability affecting the pleezer headless Deezer Connect player. In versions prior to 0.16.0, hook scripts in pleezer were spawned without proper process cleanup, resulting in the creation of zombie processes in the system's process table. Every track change and playback event would leave behind a zombie process, leading to resource exhaustion over time and preventing the creation of new processes. This issue was particularly problematic during rapid event occurrences, either through normal usage or potential manipulation of Deezer Connect protocol traffic. The vulnerability has been resolved in version 0.16.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.