CVE-2026-5497
Description
vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method. When processing `video/jpeg` data URLs, the method splits the base64 data string on commas to extract individual JPEG frames without enforcing a frame count limit. An attacker can exploit this by crafting a single API request containing thousands of comma-separated base64-encoded JPEG frames in a data URL, causing the server to decode all frames into memory and crash due to excessive memory consumption. This vulnerability is reachable via the OpenAI-compatible chat completions API and does not require authentication.
How to fix
- vllm vllm0.19.0 or later
- vllm0.19.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vllm vllm | 0.8.0 ≤ v < 0.19.0 | 0.19.0 |
| vllmPyPI | 0.8.0 ≤ v < 0.19.0 | 0.19.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.