CVE-2026-5497High· 7.5▾ TwilightvLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method. When processing `video/jpeg` data URLs, the method …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.5%
vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the VideoMediaIO.load_base64() method. When processing video/jpeg data URLs, the method splits the base64 data string on commas to extract individual JPEG frames without enforcing a frame count limit. An attacker can exploit this by crafting a single API request containing thousands of comma-separated base64-encoded JPEG frames in a data URL, causing the server to decode all frames into memory and crash due to excessive memory consumption. This vulnerability is reachable via the OpenAI-compatible chat completions API and does not require authentication.
vllm >= 0.8.0, < 0.19.0Upgrade past the affected range:
vllm 0.19.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-69147Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-92220Medium· 5.3A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0
CVE-2026-71486Medium· 4.3vLLM is an inference and serving engine for large language models
CVE-2026-34755Medium· 6.5vLLM is an inference and serving engine for large language models (LLMs)
CVE-2026-94624High· 7.5vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offloading when OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary tier
CVE-2026-57173Medium· 6.5vLLM is an inference and serving engine for large language models