CVE-2026-5497 Details
Description
vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method. When processing `video/jpeg` data URLs, the method splits the base64 data string on commas to extract individual JPEG frames without enforcing a frame count limit. An attacker can exploit this by crafting a single API request containing thousands of comma-separated base64-encoded JPEG frames in a data URL, causing the server to decode all frames into memory and crash due to excessive memory consumption. This vulnerability is reachable via the OpenAI-compatible chat completions API and does not require authentication.
A denial-of-service vulnerability has been identified in vLLM versions 0.8.0 and later. The issue arises in the `VideoMediaIO.load_base64()` method, which processes `video/jpeg` data URLs by splitting the base64 string on commas to extract individual JPEG frames. This method does not impose a limit on the number of frames, allowing an attacker to send a single API request with thousands of comma-separated base64-encoded JPEG frames. The server decodes all frames into memory, leading to excessive memory consumption and a crash. This vulnerability can be exploited through the OpenAI-compatible chat completions API, without requiring authentication.
Users can update to vLLM version 0.22.1 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 11, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2026-5497 | redhat-SADP | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487813 | redhat-SADP | |
| https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5497.json | redhat-SADP | |
| https://huntr.com/bounties/7bd92629-b396-4449-8f88-6c0092530eb4 | CISA-ADP | ExploitThird Party Advisory |
| https://github.com/vllm-project/vllm/commit/58ee61422169ce17e08248f8efa1e9df434fe395 | [email protected] | Patch |
| https://huntr.com/bounties/7bd92629-b396-4449-8f88-6c0092530eb4 | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-400 | Uncontrolled Resource Consumption | [email protected] |
| CWE-770 | Allocation of Resources Without Limits or Throttling | redhat-SADP |
Affected Products
| Product | Versions |
|---|---|
| vllm vllm | >= 0.8.0, < 0.19.0 |
CPE
Remediation
| |
Change History
10 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Modified | redhat-SADP |
| Jul 15, 2026 | CVE Modified | redhat-SADP |
| Jul 3, 2026 | CVE Modified | redhat-SADP |
| Jul 1, 2026 | CVE Modified | redhat-SADP |
| Jun 30, 2026 | CVE Modified | redhat-SADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 15, 2026 | Initial Analysis | [email protected] |
| Jun 11, 2026 | CVE Modified | CISA-ADP |
| Jun 11, 2026 | New CVE Received | [email protected] |