EUVD-2026-87744

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls the VLLMMAXAUDIOCLIPFILESIZEMB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-prompt item limits. Across four ingress paths — the shared...

CVE-2026-100650 vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls the VLLMMAXAUDIOCLIPFILESIZEMB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-prompt item limits. Across four ingress paths — the shared...

CVE-2026-100650

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls the VLLMMAXAUDIOCLIPFILESIZEMB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-prompt item limits. Across four ingress paths — the shared...

CVE-2026-100650

Versions of vLLM through 0.29.0 are vulnerable to a resource exhaustion flaw where the system fully materializes remote or inline media before enforcing documented size and quantity limits (such as VLLM_MAX_AUDIO_CLIP_FILESIZE_MB ). The vulnerability exists across four ingress paths: the shared m...

CVE-2026-100650 vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls the VLLMMAXAUDIOCLIPFILESIZEMB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-prompt item limits. Across four ingress paths — the shared...

PT-2026-99321

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1 Description The server fetches and fully materializes remote or inline media before enforcing media controls, such as the VLLM MAX AUDIO CLIP FILESIZE MB size cap and the --limit-mm-per-prompt item limits. This...

CVE-2026-100650: Uncontrolled Resource Consumption

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls the VLLMMAXAUDIOCLIPFILESIZEMB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-prompt item limits. Across four ingress paths — the shared...

busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

Linux Distros Unpatched Vulnerability : CVE-2026-88839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of- bounds write of heap pointers. CVE-2026-88839 Note that...

DEBIAN-CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

AZL-105125 CVE-2026-88839 affecting package busybox 1.36.1-28

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

UBUNTU-CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

The BusyBox passwd/group utility contains a vulnerability in the tokenize() function where it references a stale endpoint pointer after trimming. This flaw leads to an out-of-bounds write of heap pointers. To mitigate this risk, ensure that /etc/group and /etc/passwd are writable only by root and...

CVE-2026-88839 Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

EUVD-2026-85512

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839 Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...