CVE-2026-109311GHSA-m52c-39rh-f3gp
vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload
vllm-project vllm
CVSS
7.1HighExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 18 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.42%Chance of exploitation activity in the next 30 days, higher than 35% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 0.29.0vllmCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the API process.
Text from CVE List
Affected versions 2
- vllmaffected: all versions before 0.29.0CVE List
- vllmunaffected: 0.29.0CVE List