GHSA-x6mc-67gf-chw4: vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach

An attacker can crash a vLLM server running Qwen2-VL or Qwen3-VL models by sending requests with extremely high values for `max_frames` and `fps` parameters, causing the server to decode massive numbers of video frames and run out of memory. The problem exists because these Qwen video samplers (software components that extract frames from videos) don't enforce limits on these parameters, even though other video backends in the same codebase already implement such safeguards.