PT-2026-30276 · Vllm · Vllm

Seory0 · Published 2026-04-03 · Updated 2026-04-06 · CVE-2026-34755

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions vLLM versions 0.7.0 through 0.18.9

Description vLLM is an inference and serving engine for large language models (LLMs). The VideoMediaIO.load base64() method at vllm/multimodal/media/video.py does not enforce a frame count limit when splitting video/jpeg data URLs by comma to extract individual JPEG frames. The num frames parameter, which is enforced by the load bytes() code path, is bypassed in the video/jpeg base64 path. An attacker can send a single API request containing thousands of comma-separated base64-encoded JPEG frames, causing the server to decode all frames into memory and crash with an out-of-memory (OOM) error. The load base64() function at vllm/multimodal/media/video.py:51-62 is vulnerable. The API endpoint /v1/chat/completions is involved in the data flow. The data variable within the load base64() function is unbounded, leading to excessive memory consumption. The video/jpeg MIME type is part of the public API surface, used in functions like encode video url() and test suites.

Recommendations Update to version 0.19.0 or later.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-34755

GHSA-PQ5C-RJHQ-QP7P

PYSEC-2026-144

Affected Products

Vllm

References · 8

• https://github.com/vllm-project/vllm/security/advisories/GHSA-pq5c-rjhq-qp7p · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34755 · Security Note
• https://osv.dev/vulnerability/PYSEC-2026-144 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-pq5c-rjhq-qp7p · Vendor Advisory
• https://github.com/vllm-project/vllm · Note
• https://github.com/vllm-project/vllm/pull/38636 · Note
• https://github.com/vllm-project/vllm/commit/58ee61422169ce17e08248f8efa1e9df434fe395 · Note
• https://twitter.com/CVEnew/status/2041223991386337624 · Twitter Post