{"data":{"id":"a343f17d-768d-481d-8f34-cd6771155fa1","title":"CVE-2026-57173: vLLM is an inference and serving engine for large language models. Prior to 0.24.0, the input_audio handling path for…","summary":"vLLM versions prior to 0.24.0 have an input_audio handling flaw on the /v1/chat/completions endpoint. The path calls AudioMediaIO.load_bytes or AudioMediaIO.load_file without passing VLLM_MAX_AUDIO_DECODE_DURATION_S to the shared audio decoder, so the duration guard used by /v1/audio/transcriptions is bypassed. An unauthenticated client can submit a small compressed audio input that expands into a very large float32 PCM allocation, causing an out-of-memory worker crash. Inline data URLs are also not bounded by VLLM_AUDIO_FETCH_TIMEOUT. The issue affects deployments serving an audio-capable model, and authentication changes only deployment-specific reachability.","solution":"Fixed in version 0.24.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-57173","publishedAt":"2026-09-16T17:17:24.603Z","cveId":"CVE-2026-57173","cweIds":["CWE-770"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["vllm@<= 0.23.0 (fixed: 0.24.0)"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM input_audio path allows memory exhaustion","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0073,"epssCheckedAt":"2026-11-04T12:08:34.749Z","kevDateAdded":null,"advisoryAliases":["GHSA-hcwq-8wjf-3gcr"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:43:42.246Z","patchAvailable":true,"disclosureDate":"2026-09-16T17:17:24.603Z","fixReleasedAt":"2026-06-30T01:17:52.566Z","daysToFix":-78,"fixCheckedAt":"2026-10-29T21:30:34.900Z","capecIds":["CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"vllm","fixedVersion":"0.24.0","matchedVersion":"0.24.0","fixReleasedAt":"2026-06-30T01:17:52.566Z","daysToFix":-78,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:30:34.751Z"}]}}