vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, vLLM's /v1/audio/transcriptions endpoint limits compressed upload size but not decoded PCM output. A 25MB OPUS file expands to ~14.9GB of float32 PCM at decode time. This vulnerability is fixed in 0.23.1rc0.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Vllm-project |
|
No data.
No data.
References
History
Tue, 23 Jun 2026 02:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Vllm-project
Vllm-project vllm |
|
| Vendors & Products |
Vllm-project
Vllm-project vllm |
Mon, 22 Jun 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, vLLM's /v1/audio/transcriptions endpoint limits compressed upload size but not decoded PCM output. A 25MB OPUS file expands to ~14.9GB of float32 PCM at decode time. This vulnerability is fixed in 0.23.1rc0. | |
| Title | vLLM: OOM Denial of Service via Audio Decompression Bomb | |
| Weaknesses | CWE-409 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2026-06-22T22:10:45.689Z
Updated: 2026-06-22T22:10:45.689Z
Reserved: 2026-06-12T16:25:43.084Z
Link: CVE-2026-54233
Vulnrichment
No data.
NVD
No data.
Redhat
No data.