Hash Collision Attack

🗓️ 02 Jun 2025 04:46:31Reported by Veracode Vulnerability DatabaseType

vllm has a hash collision vulnerability due to improper image serialization, risking data integrity.

Reporter	Title	Published	Views	Family All 19
Chainguard	CVE-2025-46722 vulnerabilities	30 May 202501:15	–	cgr
Circl	CVE-2025-46722	29 May 202518:02	–	circl
CNNVD	vLLM 安全漏洞	29 May 202500:00	–	cnnvd
CVE	CVE-2025-46722	29 May 202516:36	–	cve
Cvelist	CVE-2025-46722 vLLM has a Weakness in MultiModalHasher Image Hashing Implementation	29 May 202516:36	–	cvelist
EUVD	EUVD-2025-16188	3 Oct 202520:07	–	euvd
Github Security Blog	vLLM has a Weakness in MultiModalHasher Image Hashing Implementation	28 May 202518:03	–	github
NVD	CVE-2025-46722	29 May 202517:15	–	nvd
OSV	CGA-2H4G-8WJ2-4XC6	6 Jun 202503:47	–	osv
OSV	CGA-J5GR-J2FQ-XC72	29 Jan 202600:47	–	osv

Vulners

Node

vllm vllmRange0.7.0–0.8.5python

vllm vllmMatch0.7.0python

vllm vllmMatch0.7.1python

vllm vllmMatch0.7.2python

vllm vllmMatch0.7.3python

vllm vllmMatch0.8.0python

vllm vllmMatch0.8.1python

vllm vllmMatch0.8.2python

vllm vllmMatch0.8.3python

vllm vllmMatch0.8.4python

vllm vllmMatch0.8.5.post1python

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-46722
github	www.github.com/vllm-project/vllm/security/advisories/GHSA-c65p-x677-fgj6
github	www.github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2025-43.yaml
github	www.github.com/vllm-project/vllm/commit/99404f53c72965b41558aceb1bc2380875f5d848
github	www.github.com/vllm-project/vllm/pull/17378
github	www.github.com/vllm-project/vllm

13 Dec 2025 07:30Current

4.3Medium risk

Vulners AI Score4.3

CVSS 3.14.2 - 7.3

EPSS0.00231

SSVC