PYSEC-0000-CVE-2026-93436

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with maxtokens=0 to exhaust decode-worker memory without bound until the worker restarts...

PYSEC-2026-3996

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with maxtokens=0 to exhaust decode-worker memory without bound until the worker restarts...

PYSEC-2026-3996

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with maxtokens=0 to exhaust decode-worker memory without bound until the worker restarts...

CVE-2026-93436

vLLM through version 0.29.0 is vulnerable to a memory exhaustion issue in prefill/decode disaggregated deployments. The root cause is a failure to properly clean up decode-side metadata for rejected inference requests. A remote, unauthenticated attacker can submit requests with max_tokens=0 to ex...

CVE-2026-93436 vLLM through 0.29.0 Memory Exhaustion via Rejected Requests

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with maxtokens=0 to exhaust decode-worker memory without bound until the worker restarts...

freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol RDP server can exploit a heap buffer overflow vulnerability during Opus audio decoding. This occurs when the server negotiates Opus audio with a vulnerable client, causing the...

vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation

Summary Current vLLM main lets an inference request choose the PyNvVideoCodec GPU video decoder through mediaiokwargs.video.videobackend, but engine GPU memory reservation is computed only from static startup configuration and VLLMVIDEOLOADERBACKEND. If the server starts with the default...

SUSE CVE-2026-89827

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid force-completing uninitialized UVD rings uvdv70swinit does not initialize the UVD decode ring for an SR-IOV VF. However, amdgpuuvdresume unconditionally force-completes the decode ring when restoring its fence...

CVE-2026-86040

CVE-2026-86040 affects @libp2p/floodsub in the libp2p JavaScript networking stack, prior to version 11.0.26 . The vulnerability stems from unauthenticated RPC frames on /floodsub/1.0.0 being decoded without protobuf element limits, and the subscription array being processed synchronously without ...

CVE-2026-86040 libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthenticated RPC frames on /floodsub/1.0.0 through PeerStreams.attachInboundStream in packages/floodsub/src/peer-streams.ts without protobuf element limits, then processRpc and...

CVE-2026-86040 libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthenticated RPC frames on /floodsub/1.0.0 through PeerStreams.attachInboundStream in packages/floodsub/src/peer-streams.ts without protobuf element limits, then processRpc and...

CVE-2026-24073

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size...

CVE-2026-24073 Out-of-bounds Write in Video

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size...

EUVD-2026-81320

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size...

CVE-2026-24073 Out-of-bounds Write in Video

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size...

CVE-2026-24073

CVE-2026-24073 is an out-of-bounds write in Qualcomm's Video component, specifically in the processing of decode statistics . The root cause is insufficient validation of an offset against structure size , leading to memory corruption. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local a...

EUVD-2026-81317

Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrary same-origin content under the user’s session...

PT-2026-102782

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with max tokens=0 to exhaust decode-worker memory without bound until the worker restarts...

PT-2026-94356

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions prior to 0.17.1 Description In DistServe prefill/decode disaggregation mode, the proxy uses user-facing session IDs instead of internal scheduler keys, which prevents the release of scheduler sessions. Unauthenticate...

PT-2026-95164

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1 Description In prefill/decode disaggregated deployments, the software fails to properly clean up decode-side metadata for rejected inference requests. A remote attacker can submit multiple requests using the max...