CVE-2026-115913GHSA-8397-8qf6-f2gm
vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine
vllm-project vllm
CVSS
6.5MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder in phi4mm_audio.py and phi4mm_utils.py uses eager attention by default, allowing a remote client to submit one legal long audio clip that causes MultiHeadedAttention.forward_attention to materialize and retain full attention matrices in self.attn. The scaled dot-product attention branch does not materialize these matrices. The resulting quadratic GPU-memory use can cause an out-of-memory condition and terminate EngineCore for all users. This issue is fixed in version 0.32.0.
Text from CVE List
Affected versions 1
- vllmaffected: < 0.32.0CVE List
References 4
- github.com/vllm-project/vllm/commit/3d52578e13454de0bb8352cac988347cdcc89928Fixvia CVE List
- github.com/vllm-project/vllm/releases/tag/v0.32.0Fixvia CVE List
- github.com/vllm-project/vllm/security/advisories/GHSA-8397-8qf6-f2gmAdvisoryvia CVE List
- github.com/vllm-project/vllm/pull/60614Referencevia CVE List