CVE-2026-109311

A flaw was found in vLLM. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS by uploading a crafted Immersive Audio Model and Formats IAMF audio file to the transcription endpoint. Because input data is passed to the underlying media processing library...

Improper Validation of Specified Quantity in Input

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via loadaudiopyav in the audio transcription endpoint /v1/audio/transcriptions. The function...

CVE-2026-109311

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the A...

CVE-2026-109311 vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the A...

CVE-2026-109311 vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the A...

CVE-2026-109311

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the A...

EUVD-2026-97613

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the A...

CVE-2026-109311 vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the A...

CVE-2026-109311

Versions of vLLM prior to 0.29.0 are vulnerable to a heap overflow DoS. The issue arises because the software passes uploaded audio files to the PyAV/FFmpeg av.open() fallback using only a file-size check, which exposes a known heap overflow in FFmpeg's IAMF parser . Authenticated remote attacker...

CVE-2026-109311: Improper Input Validation

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the A...

FFmpeg IAMF demultiplexer DoS

The vulnerability of the IAMF demultiplexer in the FFmpeg multimedia library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2026-84372

Name of the Vulnerable Software and Affected Versions Ffmpeg versions 7.0 and later Description A buffer overflow occurs in the libavformat/iamf writer.c component, which can be exploited by an attacker to cause a denial of service. A buffer overflow is a condition where a program writes more dat...

JLSEC-2026-1183 FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption...

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...

CVE-2026-66037

A flaw was found in FFmpeg. An uncontrolled resource consumption vulnerability exists in the IAMF demuxer. An unauthenticated attacker can exploit this by supplying a specially crafted input file with a malicious countlabel field. This can cause the system to allocate a large amount of memory,...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the mixpresentationobu function of libavformat/iamfparse.c, which calls avcalloccountlabel, sizeoflanguagelabel with the attacker-controlled countlabel before validating the...

Linux Distros Unpatched Vulnerability : CVE-2026-66037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated...

CVE-2026-66037

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...

DEBIAN-CVE-2026-66037

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...

CVE-2026-66037

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...

CVE-2026-66037

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...