https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 12:55:17 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-93841 <p>vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing out-of-bounds writes that corrupt concurrent requests&#39; sampler state and alter repetition penalty behavior.</p> <p>vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing out-of-bounds writes that corrupt concurrent requests&#39; sampler state and alter repetition penalty behavior.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-93841 https://vulnerability.circl.lu/vuln/ghsa-q9hm-g73w-q6wp <p>vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing out-of-bounds writes that corrupt concurrent requests&#39; sampler state and alter repetition penalty behavior.</p> <p>vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing out-of-bounds writes that corrupt concurrent requests&#39; sampler state and alter repetition penalty behavior.</p> https://vulnerability.circl.lu/vuln/ghsa-q9hm-g73w-q6wp https://vulnerability.circl.lu/vuln/opensuse-su-2026:11867-1 <p>python313-vllm-0.30.0-1.1 on GA media</p> <p>python313-vllm-0.30.0-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11867-1 https://vulnerability.circl.lu/vuln/pysec-2026-3999 <p><strong>Affected:</strong> PyPI: vllm</p> <p>vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing out-of-bounds writes that corrupt concurrent requests&#39; sampler state and alter repetition penalty behavior.</p> <p><strong>Affected:</strong> PyPI: vllm</p> <p>vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing out-of-bounds writes that corrupt concurrent requests&#39; sampler state and alter repetition penalty behavior.</p> https://vulnerability.circl.lu/vuln/pysec-2026-3999