Threats tagged 'ghsa-hq63-vm56-2666'

1 threat

Threats tagged 'ghsa-hq63-vm56-2666'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.6%	CVE-2026-94626vllm · Memory Allocation with Excessive Size Value High8.7EPSS 0.6%2026-09-21CVE Database V5CVE-2026-94626 vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoints, allowing attackers to allocate unbounded memory. Attackers can supply arbitrary tp_size values in prefill/decode disaggregated deployments to exhaust memory and trigger kernel OOM-kill of the decode worker process. EPSS 0.6%Vulnerability vllm-project #ghsa-hq63-vm56-2666	CVE Database V5	2026-09-21

Showing 1–1 of 1 result