CVE-2026-5497

vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory OOM Denial of Service DoS attack due to unbounded frame count processing in the "VideoMediaIO.loadbase64" method. When processing "video/jpeg" data URLs, the method splits the base64 data string on commas to extract individual JPEG...

PT-2026-80324

vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory OOM Denial of Service DoS attack due to unbounded frame count processing in the VideoMediaIO.load base64 method. When processing video/jpeg data URLs, the method splits the base64 data string on commas to extract individual JPEG...