VLLM : DoS Via Unvalidated Mm_processor_kwargs In Multimodal Image Processors (Isaac, InternVL, H2OVL, Etc.)

Summary API clients can supply arbitrary "mmprocessorkwargs" per request. vLLM forwards these values through the multimodal rendering and processing pipeline to Hugging Face and custom image/video processor constructors and calls. Resource-sensitive values such as image size, patch size, patch...