{"id":"CVE-2026-115914","state":"PUBLISHED","title":"vLLM DeepSeek-OCR image processing vulnerable to denial of service","description":"vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal image whose normalized pixels sum to zero when that image is alone in its per-step encoder batch. _parse_and_validate_image_input returns no embedding, embed_multimodal propagates that value, and sanity_check_mm_encoder_outputs triggers a fatal assertion that shuts down the engine for all users. This issue is fixed in version 0.32.0.","publishedAt":"2026-10-26T17:08:20.839Z","updatedAt":"2026-10-30T14:23:21.521Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"GitHub_M"},"assigner":"GitHub_M","products":["vllm-project vllm"],"affected":[{"vendor":"vllm-project","product":"vllm","versions":[{"version":">= 0.11.1, < 0.32.0","status":"affected"}]}],"references":["https://github.com/vllm-project/vllm/security/advisories/GHSA-gq5q-89c7-vhvx","https://github.com/vllm-project/vllm/pull/59417","https://github.com/vllm-project/vllm/commit/c15672cfb49152ebf65cfd188e71b84593ec5686","https://github.com/vllm-project/vllm/releases/tag/v0.32.0"],"weaknesses":["CWE-617"],"ingestedAt":"2026-10-30T14:38:06.611Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/115xxx/CVE-2026-115914.json","commit":"d88c0a1c0d885dc592725fb56de7f3fed94f6783","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-115914","state":"PUBLISHED","datePublished":"2026-10-26T17:08:20.839Z","dateUpdated":"2026-10-30T14:23:21.521Z","assignerShortName":"GitHub_M","assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","dateReserved":"2026-10-23T20:21:45.107Z"},"containers":{"cna":{"title":"vLLM DeepSeek-OCR image processing vulnerable to denial of service","descriptions":[{"lang":"en","value":"vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal image whose normalized pixels sum to zero when that image is alone in its per-step encoder batch. _parse_and_validate_image_input returns no embedding, embed_multimodal propagates that value, and sanity_check_mm_encoder_outputs triggers a fatal assertion that shuts down the engine for all users. This issue is fixed in version 0.32.0."}],"affected":[{"vendor":"vllm-project","product":"vllm","versions":[{"version":">= 0.11.1, < 0.32.0","status":"affected"}]}],"references":[{"url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-gq5q-89c7-vhvx","name":"https://github.com/vllm-project/vllm/security/advisories/GHSA-gq5q-89c7-vhvx","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/vllm-project/vllm/pull/59417","name":"https://github.com/vllm-project/vllm/pull/59417","tags":["x_refsource_MISC"]},{"url":"https://github.com/vllm-project/vllm/commit/c15672cfb49152ebf65cfd188e71b84593ec5686","name":"https://github.com/vllm-project/vllm/commit/c15672cfb49152ebf65cfd188e71b84593ec5686","tags":["x_refsource_MISC"]},{"url":"https://github.com/vllm-project/vllm/releases/tag/v0.32.0","name":"https://github.com/vllm-project/vllm/releases/tag/v0.32.0","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-617","lang":"en","description":"CWE-617: Reachable Assertion","type":"CWE"}]}],"providerMetadata":{"shortName":"GitHub_M","orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","dateUpdated":"2026-10-26T17:08:20.839Z"},"source":{"advisory":"GHSA-gq5q-89c7-vhvx","discovery":"UNKNOWN"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-30T14:23:13.354875Z","id":"CVE-2026-115914","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-30T14:23:21.521Z"}}]}}}