CVE-2026-55646

A flaw was found in vLLM, an inference and serving engine for large language models. A remote attacker, by submitting an oversized audio file to the /v1/audio/transcriptions or /v1/audio/translations routes, can cause the system to allocate excessive memory. This occurs before the configured file...

CVE-2019-25560

Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an oversized buffer and trigger the crash by opening the file through the Browse song functionality...