CVE-2026-116175
Received Received - Intake

vLLM Memory Exhaustion via Decompression Bomb in Audio Processing

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulnCheck

Description
vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path calls load_audio without the max_duration_s decoded-duration limit. Authenticated attackers can send small compressed audio via input_audio or audio_url in /v1/chat/completions requests that expands to huge decoded PCM, exhausting server memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116175
EUVD
EUVD-2026-109436

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vllm-project vllm 0.19.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-409 The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

vLLM versions 0.19.0 to 0.24.0 have a decompression bomb vulnerability in the AudioMediaIO multimodal path. Authenticated attackers can send small compressed audio files via input_audio or audio_url in /v1/chat/completions requests. These files expand into much larger decoded PCM data, consuming excessive server memory and causing crashes.

Detection Guidance

Monitor network traffic for unusually large audio payloads in /v1/chat/completions requests. Check server memory usage spikes during audio processing. Inspect logs for failed audio decoding attempts or crashes in vLLM versions 0.19.0 to 0.24.0.

Impact Analysis

This vulnerability can lead to denial-of-service (DoS) attacks, where attackers exhaust server memory by sending small compressed audio files that expand significantly when decoded. This can crash the server or degrade system availability, even if the payload is supplied via an audio URL.

Compliance Impact

This vulnerability primarily impacts system availability by enabling denial-of-service attacks through memory exhaustion. While it does not directly violate GDPR or HIPAA, it could lead to service disruptions that compromise data availability, a key requirement under both regulations. GDPR requires ensuring data availability through measures like backups and resilience, while HIPAA mandates safeguards to protect against unauthorized access or disruptions. A successful DoS attack could hinder compliance with these availability requirements.

Mitigation Strategies

Upgrade vLLM to version 0.24.0 or later. Apply the duration guard fix to the AudioMediaIO class. Restrict access to /v1/chat/completions endpoints to authenticated users only. Monitor memory usage and set alerts for abnormal consumption.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116175. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart