Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/09/10 9:45 a.m.•11 views

vLLM: Cross-User Data Leak Vulnerability

SummaryAn integer overflow in the actandmulkernel kernel can cause the output of one user request to be incorporated into the response of another request within the same inference batch. Under certain conditions, the last request in a batch can receive a partial or complete copy of the first user...

5.3CVSS5.8AI score0.00404EPSS
SaveExploits1References9Affected Software1
OSV
OSV
•added 2026/09/10 9:45 a.m.•6 views

PYSEC-2026-3935 vLLM: Cross-User Data Leak Vulnerability

Summary An integer overflow in the actandmulkernel kernel can cause the output of one user request to be incorporated into the response of another request within the same inference batch. Under certain conditions, the last request in a batch can receive a partial or complete copy of the first...

5.3CVSS5.8AI score0.00404EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2026/09/08 8:24 p.m.•9 views

vLLM: Cross-User Data Leak Vulnerability

Summary An integer overflow in the actandmulkernel kernel can cause the output of one user request to be incorporated into the response of another request within the same inference batch. Under certain conditions, the last request in a batch can receive a partial or complete copy of the first...

5.3CVSS5.8AI score0.00404EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2026/09/08 8:24 p.m.•8 views

GHSA-7M6H-X95X-82Q5 vLLM: Cross-User Data Leak Vulnerability

Summary An integer overflow in the actandmulkernel kernel can cause the output of one user request to be incorporated into the response of another request within the same inference batch. Under certain conditions, the last request in a batch can receive a partial or complete copy of the first...

5.3CVSS5.8AI score0.00404EPSS
SaveExploits1References7
NVD
NVD
•added 2026/08/13 3:20 p.m.•12 views

CVE-2026-73558

vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x 2 d in activationkernels.cu can cause actandmulkernel to consume another batched user's input, allowing a request processed in the same inference batch to receive a partial or...

5.3CVSS0.00404EPSS
SaveExploits1References5
OSV
OSV
•added 2026/08/13 3:06 p.m.•41 views

CVE-2026-73558 vLLM: Cross-User Data Leak Vulnerability

vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x 2 d in activationkernels.cu can cause actandmulkernel to consume another batched user's input, allowing a request processed in the same inference batch to receive a partial or...

5.3CVSS5.5AI score
SaveExploits0References7
Rows per page
Query Builder