Lucene search
+L

675 matches found

Github Security Blog
Github Security Blog
added 2026/04/27 6:32 p.m.24 views

vLLM makes Use of Uninitialized Resource

A vulnerability was found in vLLM up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...

6.3CVSS5.5AI score0.00289EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2026/04/27 6:32 p.m.6 views

GHSA-X368-4G9H-FVV4 vLLM makes Use of Uninitialized Resource

A vulnerability was found in vLLM up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...

6.3CVSS5.5AI score0.00289EPSS
SaveExploits0References8
Snyk
Snyk
added 2026/04/27 6:19 p.m.9 views

Use of Uninitialized Resource

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Use of Uninitialized Resource via the hasmambalayers function in the KV Block Handler. An attacker can cause unintended behavior by leaking data...

6.3CVSS6.2AI score0.00289EPSS
SaveExploits0References2
PyPA
PyPA
added 2026/04/27 5:16 p.m.19 views

PYSEC-2026-2306

A vulnerability was found in vllm up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...

6.3CVSS5.7AI score0.00289EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2026/04/27 5:16 p.m.9 views

PYSEC-2026-2306

A vulnerability was found in vllm up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...

6.3CVSS5.7AI score0.00289EPSS
SaveExploits0References8
CVE
CVE
added 2026/04/27 4:45 p.m.43 views

CVE-2026-7141

CVE-2026-7141 affects vllm up to 0.19.0, specifically the KV Block Handler’s has_mamba_layers function in vllm/v1/kv_cache_interface.py. A manipulation can trigger an uninitialized resource, with remote initiation possible. The issue is described as high complexity and difficult exploitability, w...

6.3CVSS5.5AI score0.00289EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/27 4:45 p.m.8 views

CVE-2026-7141 vLLM KV Block kv_cache_interface.py has_mamba_layers uninitialized resource

A vulnerability was found in vLLM up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...

6.3CVSS5.5AI score0.00289EPSS
SaveExploits0References6
OSV
OSV
added 2026/04/27 4:45 p.m.8 views

CVE-2026-7141 vLLM KV Block kv_cache_interface.py has_mamba_layers uninitialized resource

A vulnerability was found in vLLM up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...

6.3CVSS5.3AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.28 views

PT-2026-35459

A vulnerability was found in vllm up to 0.19.0. The affected element is the function has mamba layers of the file vllm/v1/kv cache interface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attac...

6.3CVSS5.3AI score0.00289EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2026/04/27 12:00 a.m.9 views

The vulnerability of the j1939_send_one() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the j1939sendone function in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

5.5CVSS6.5AI score0.00204EPSS
SaveExploits0References9Affected Software4
Redos
Redos
added 2026/04/24 12:00 a.m.15 views

ROS-20260424-73-0003

Vulnerability in gimp related to the use of an uninitialized resource. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

8.8CVSS7.2AI score0.00972EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/15 7:24 p.m.10 views

CVE-2026-26175

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack...

4.6CVSS5.8AI score0.00395EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/14 6:30 p.m.18 views

EUVD-2026-22412

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack...

4.6CVSS5.8AI score0.00395EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/14 6:16 p.m.15 views

CVE-2026-26175

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack...

4.6CVSS0.00395EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:00 p.m.22 views

Windows Boot Manager Security Feature Bypass Vulnerability

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack...

4.6CVSS6.2AI score0.00395EPSS
SaveExploits0
Redos
Redos
added 2026/04/14 12:00 a.m.12 views

ROS-20260414-73-0002

Vulnerability in kernel-lt related to the use of an uninitialized resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.8AI score0.00156EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.21 views

PT-2026-32752

Name of the Vulnerable Software and Affected Versions Windows Boot Manager affected versions not specified Description Use of an uninitialized resource allows an unauthorized attacker to bypass a security feature through a physical attack. Recommendations At the moment, there is no information...

4.6CVSS6.2AI score0.00395EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/04/03 9:50 p.m.8 views

Use of Uninitialized Resource

Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource in the undopxr24impl function. An attacker can access sensitive heap memory contents by submitting a specially crafted EXR file that triggers the decoder to read uninitialized memory and include it in the...

8.7CVSS5.9AI score0.00482EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/03/26 3:13 p.m.9 views

CVE-2025-12736

in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource...

6.5CVSS5.8AI score0.00167EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/03/25 5:00 p.m.6 views

Use of Uninitialized Resource

Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource via 'js-task-runner.ts'. An attacker can expose residual data from the Node.js process, including secrets or tokens, by creating or modifying workflows that allocate uninitialized buffers when Task Runners...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References2
Rows per page
Query Builder