{"data":{"id":"dffb878b-7fe7-40a6-be71-5d7d5992664e","title":"GHSA-6pr9-rp53-2pmc: vLLM: OOM Denial of Service via Audio Decompression Bomb","summary":"vLLM's `/v1/audio/transcriptions` endpoint limits the compressed upload size but not the decoded PCM output, so a 25MB OPUS file expands to about 14.9GB of float32 PCM at decode time, tested on v0.19.0. An unauthenticated attacker can exhaust server memory with a few concurrent requests, each a valid upload within the documented limit, because the audio decoder in `audio.py` accumulates all frames without a size check and `np.concatenate` allocates a second contiguous array.","solution":"A fix was merged in https://github.com/vllm-project/vllm/pull/44970","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-6pr9-rp53-2pmc","publishedAt":"2026-06-17T14:06:22.000Z","cveId":"CVE-2026-54233","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["vllm@<= 0.23.0"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00422,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-6pr9-rp53-2pmc"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-06-17T14:06:22.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}