Description
vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path calls load_audio without the max_duration_s decoded-duration limit. Authenticated attackers can send small compressed audio via input_audio or audio_url in /v1/chat/completions requests that expands to huge decoded PCM, exhausting server memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| vllm-project | vllm | 0.19.0 – < 0.24.0 | 0.24.0 |
Advisories 1
- WID-SEC-2026-4151 vllm: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Oct 25, 2026
References
- GitHub Security Advisory (GHSA-r45p-7qwx-qwjw) vendor-advisory
- VulnCheck Advisory: vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions third-party-advisory