CVE-2026-115914

A flaw was found in vLLM when processing image inputs with certain optical character recognition OCR models. A remote attacker can trigger a denial of service DoS by submitting a specially crafted image whose normalized pixel values sum to zero. This input causes the multimodal encoder validation...