Description
SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNemotronVLImageProcessor. Remote attackers can submit small, highly compressed images with huge dimensions to the generic image loader, exhausting worker memory during decoding.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| sgl-project | sglang | ≤ 0.5.21 | — |
References
- GitHub Issue #43707 issue-tracking
- https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/processors/nano_nemotron_vl.py#L82 technical-description
- https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/utils/common.py#L1952-L1961 technical-description
- https://github.com/sgl-project/sglang product
- VulnCheck Advisory: SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor third-party-advisory