CVE-2026-93841

A flaw was found in vLLM. This memory corruption vulnerability exists in the Triton bincountkernel, where prompt token identifiers IDs are used to index a bitset without proper bounds checking against the vocabulary size. A remote attacker can exploit this by submitting multimodal audio requests...

Out-of-bounds Write

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Out-of-bounds Write via the Triton bincountkernel, where prompt token IDs index the penalty prompt-presence bitset without bounds checking against t...

CVE-2026-93841 vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs

vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton bincountkernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing...

CVE-2026-93841 vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs

vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton bincountkernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing...

PT-2026-95640

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.30.0 Description A memory corruption issue exists in the Triton bincount kernel function. The problem occurs when prompt token IDs index the penalty prompt-presence bitset without performing bounds checking against the...