1246 matches found
PT-2026-102783
vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (CUDA)
Red Hat AI Base Images 3.3.3 CUDA is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.7 (CUDA)
Red Hat AI Inference Server 3.3.7 CUDA is now available. Red Hat® AI Inference Server...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.7 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.3.7 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (CUDA 13.0)
Red Hat AI Base Images 3.3.3 CUDA 13.0 is now available. Red Hat® AI Base Images...
Allocation of Resources Without Limits or Throttling
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via VideoMediaIO.mergekwargs in vllm/multimodal/media/video.py, where a request-level...
PT-2026-90534
A critical OOB memory access vulnerability in the exllamav3 ext CUDA extension allows for immediate DoS via a crafted input. Tracked as CVE-2026-84286 , the flaw lies in the kernel dispatch logic where the block index cbi is used to access a fixed 24-entry array without validation. Technical...
ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index
Overview An out-of-bounds OOB memory access vulnerability involving unchecked array indexing has been identified in the exllamav3ext compute unified device architecture CUDA extension. Successful exploitation can lead to an immediate denial of service or application instability. This vulnerabilit...
CVE-2026-69112 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-13.0, py3-accelerate-cuda-12.9, vllm-openai-cuda-12.9, py3-accelerate-cuda-13.0, nemo...
GHSA-4J2P-28Q2-5M79 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-13.0, py3-accelerate-cuda-12.9, vllm-openai-cuda-12.9, py3-accelerate-cuda-13.0, nemo...
Towards Standardized Evaluation of GPU Memory Safety with GMSBench
As GPUs become increasingly integral to high-performance computing and machine learning, ensuring memory safety in GPU programs has become crucial for reliable and secure execution. However, evaluating GPU memory safety techniques remains challenging due to the lack of comprehensive and...
CVE-2026-44223 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9...
GHSA-83VM-P52W-F9PW vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.2.2 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...
Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)
Red Hat AI Inference Server 3.2.2 CUDA is now available. Red Hat® AI Inference Server...
CVE-2026-73559 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...
GHSA-87X5-VMC3-756J vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.6 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.3.6 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...