Advisories · Technology
vllm.
Every CVE that names vllm among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids
- vllm
- CWE-129
- CVSS 8.3 High
vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors
- vllm
- Memory corruption
- CVSS 8.7 High
vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override
- vllm
- Denial of service
- CVSS 7.1 High
vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions
- vllm
- CWE-409
- CVSS 8.2 High
vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate
- vllm
- CWE-20
- CVSS 8.2 High
vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n
- vllm
- CWE-20
- CVSS 7.1 High
vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate
- vllm
- CWE-248
- CVSS 6.3 Medium
vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense
- vllm
- CWE-440
- CVSS 7.1 High
vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload
- vllm
- CWE-20
- CVSS 5.3 Medium
vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
- vLLM
- Memory corruption
- CVSS 7.1 High
vLLM before 0.29.0 Denial of Service via out-of-range stop_token_ids
- vllm
- CWE-129
- CVSS 7.1 High
vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypass
- vllm
- Denial of service
- CVSS 6.3 Medium
vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass
- vllm
- Denial of service
- CVSS 6.9 Medium
vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding
- vllm
- Denial of service
- CVSS 6.9 Medium
vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt
- vllm
- CWE-20
- CVSS 8.7 High
vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision
- vllm
- Denial of service
- CVSS 5.3 Medium
vllm-project vllm thinking_budget_state.py algorithmic complexity
- vllm
- Denial of service
- CVSS 6.9 Medium
vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption
- vLLM
- Denial of service
- CVSS 5.3 Medium
vllm-project vLLM Jinja Template Rendering completions resource consumption
- vLLM
- Denial of service
- CVSS 4.8 Medium
vllm-project vLLM tiktoken vocab File mod.rs new denial of service
- vLLM
- Denial of service
- CVSS 7.1 High
vLLM before 0.28.0 Denial of Service via Audio Header
- vLLM
- CWE-409
- CVSS 6.9 Medium
vLLM before 0.28.0 Denial of Service via audio extraction
- vLLM
- Denial of service