https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 16:41:06 +0000 https://vulnerability.circl.lu/vuln/cve-2026-93841 <p><strong>Affected:</strong> vllm-project vllm</p> <p>vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing out-of-bounds writes that corrupt concurrent requests&#39; sampler state and alter repetition penalty behavior.</p> <p><strong>Affected:</strong> vllm-project vllm</p> <p>vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing out-of-bounds writes that corrupt concurrent requests&#39; sampler state and alter repetition penalty behavior.</p> https://vulnerability.circl.lu/vuln/cve-2026-93841