Description
vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the API process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| vllm-project | vllm | < 0.29.0 | 0.29.0 |
Advisories 1
- WID-SEC-2026-3604 vllm: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2026
References
- GitHub Security Advisory (GHSA-m52c-39rh-f3gp) vendor-advisory
- VulnCheck Advisory: vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload third-party-advisory