CVE-2026-115916

Publié : 26 octobre 2026

Modifié : 26 octobre 2026

Score CVSS

6.5

MEDIUM

Description détaillée

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_token_id with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass validation. For a tensor-parallel size of one and an exact multiple-of-64 vocabulary, VocabParallelEmbedding.forward does not mask that value before F.embedding uses it, causing a CUDA device-side assertion and terminating the engine. This issue is fixed in version 0.32.0.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Références et Patchs

https://github.com/vllm-project/vllm/commit/37cecc8141e2dcba9dd534897a164d4baaf27229 https://github.com/vllm-project/vllm/pull/59491 https://github.com/vllm-project/vllm/releases/tag/v0.32.0 https://github.com/vllm-project/vllm/security/advisories/GHSA-q97c-p368-75c4

Dernières Vulnérabilités

CVE-2026-116638

The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to circumvent firmware protections and gain unauthorized access to system resources.

VOIR DÉTAILS

CVE-2026-116632

A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1.

VOIR DÉTAILS

CVE-2026-116631

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.

VOIR DÉTAILS