Lucene search
+L

11 matches found

NVD
NVD
•added 2026/08/04 6:16 p.m.•33 views

CVE-2026-24255

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tamperin...

7.5CVSS0.00545EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/04 5:23 p.m.•45 views

EUVD-2026-52803

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tamperin...

7.5CVSS5.8AI score0.00545EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/04 5:23 p.m.•23 views

CVE-2026-24255

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tamperin...

7.5CVSS5.8AI score0.00545EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/08/04 5:23 p.m.•56 views

CVE-2026-24255

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tamperin...

7.5CVSS0.00545EPSS
SaveExploits0References3
Mend
Mend
•added 2026/08/04 5:23 p.m.•9 views

CVE-2026-24255

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tamperin...

8.7CVSS5.8AI score0.00545EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/04 12:00 a.m.•6 views

CVE-2026-24255: Incomplete Comparison with Missing Factors

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tamperin...

7.5CVSS5.8AI score0.00545EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•12 views

PT-2026-67792

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal embedding cache. An attacker can trigger a hash collision by submitting images that possess an identical pixel byte sequence despite having...

7.5CVSS5.7AI score0.00545EPSS
SaveExploits0References5
Nvidia
Nvidia
•added 2026/08/04 12:00 a.m.•61 views

Security Bulletin: NVIDIA Dynamo - August 2026

NVIDIA has released a software update for NVIDIA® Dynamo. To protect your system, clone or update this software from the NVIDIA ai-dynamo/dynamo GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses and...

9.8CVSS5.9AI score0.00889EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/11/21 1:22 a.m.•23 views

EUVD-2025-198357

vLLM is an inference and serving engine for large language models LLMs. From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape e.g. hidden dimension is wrong, regardless of whether...

8.3CVSS6.1AI score0.0041EPSS
SaveExploits0References5
Mend
Mend
•added 2025/11/21 1:22 a.m.•11 views

CVE-2025-62372

vLLM is an inference and serving engine for large language models LLMs. From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape e.g. hidden dimension is wrong, regardless of whether...

8.3CVSS6.1AI score0.0041EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/21 12:00 a.m.•3 views

CVE-2025-62372: Improper Validation of Array Index

vLLM is an inference and serving engine for large language models LLMs. From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape e.g. hidden dimension is wrong, regardless of whether...

8.3CVSS6.1AI score0.0041EPSS
SaveExploits0References5
Rows per page
Query Builder