CVE-2026-109311
HIGH 7.1vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the API process.
Severe if exploited (CVSS 7.1), but no known exploitation and low modeled probability. Patch on a normal cadence.
Exploitation likelihood
0.5%chance of exploitation in 30 days · 41st percentile
Impact if exploited
7.1CVSS 4.0 · HIGH
- ConfidentialityNone
- IntegrityNone
- AvailabilityHigh
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ⚠Privileges: Requires a low-privilege account
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
- ✓Requirements: No special attack requirements
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
- CWE-20: Improper Input Validation
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
References and research data (JSON)
Vendor product assessments
rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cpu-rhel9@sha256:81c5994dc20321f8bd3969099eade78ef127cbd79f2d0ccea101c773e4c7fa4d?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9
- none available: Fix deferred
rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cuda-rhel9@sha256:0d22e2301ce26ef68effda5d3a4a20381ad0ea34d1240e159e245bd44c2e125b?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9
- none available: Fix deferred
rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-gaudi-rhel9@sha256:ce1e4fd82dd37d299ce8c64a237971d00faf602f06868c986e81aefa04c283ef?repository_url=registry.redhat.io/rhaii/vllm-gaudi-rhel9
- none available: Fix deferred
rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-neuron-rhel9@sha256:1079c9afecdbc33f4790792f0d712dbf7523790a92dcfbe8fb5cf4c2d282fc5b?repository_url=registry.redhat.io/rhaii/vllm-neuron-rhel9
- none available: Fix deferred
rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-rocm-rhel9@sha256:1a30359d6ca5d0891e403b9b0a23c0ae1ad6e30a2429b9b42e246b874fe8859a?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9
- none available: Fix deferred
rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-spyre-rhel9@sha256:11ad6e13c41728944d933c7abe01d1d10ecb3f8e8b4f0da50ec53b7df6f036a8?repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9
- none available: Fix deferred
rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-tpu-rhel9@sha256:0c2ac747d67dc0e80162ff05867dd702e474b2217659f19f28b8e3a0c03a942a?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9
- none available: Fix deferred
rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cpu-rhel9@sha256:fb7791bbfea99e9f81529fe8cc1e7c834ca470585c27590e3d0a6834167cd436?repository_url=registry.redhat.io/rhaiis/vllm-cpu-rhel9
- none available: Fix deferred
rhaiis/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cuda-rhel9@sha256:73bbc4560132c4aaa9bbd608ce9560eeae7b30bcc8f014da460afa5622139372?repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9
- none available: Fix deferred
rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-neuron-rhel9@sha256:8ba72cec5d79b1a751eb09774c81fd6181b43ec69a2e5116982661b34366874d?repository_url=registry.redhat.io/rhaiis/vllm-neuron-rhel9
- none available: Fix deferred
rhaiis/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-rocm-rhel9@sha256:37b64a8df90756aae0ee96d2f07765adbce5ed5beb2414ac3845806ad2219cfc?repository_url=registry.redhat.io/rhaiis/vllm-rocm-rhel9
- none available: Fix deferred
rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea?repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9
- none available: Fix deferred
rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-tpu-rhel9@sha256:b1c12112a1e8a298645e10d34d44c9961a6121aa8d87fc5d65ad83e1ffa3c586?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9
- none available: Fix deferred
rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-aws-cuda-rhel9@sha256:06b1e9b7df858121b6f339a5e78de93307be96c191a1c3e6df50cfeffaf9df15?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9
- none available: Fix deferred
rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-azure-cuda-rhel9@sha256:698d9e34aaf479d0149ea75b841dacbe0117ba2e3718a7088ac98ea6b081792e?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9
- none available: Fix deferred
rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-azure-rocm-rhel9@sha256:87723c21f48eb371968e2d68346953f2a03a3cf643a967801b84696ee3e1f1e8?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9
- none available: Fix deferred
rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-cuda-rhel9@sha256:e0fbb896811ab54d183e23612030072b946674824bad697bf2b3f68362651662?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9
- none available: Fix deferred
rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-gaudi-rhel9@sha256:e1057b59ca1be9501332abf97230855e85c7df858356be0da9dce230ea7e98e1?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9
- none available: Fix deferred
rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-gcp-cuda-rhel9@sha256:c1a193fa047eedbbf52be0b1d0f5d52e3e572d144a871f7c9322a34ba5abd92f?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9
- none available: Fix deferred
rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-rocm-rhel9@sha256:8fe5203e86917e5f829bd64b831cad31536d23a213b4bfe31e652577ad0faf2e?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9
- none available: Fix deferred
rhoai/odh-kserve-agent-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-agent-rhel9@sha256:cb2396d837f6249c85d55e118b61729e6c59cfb5a2bd45a0cf31867cb3f00cfc?repository_url=registry.redhat.io/rhoai/odh-kserve-agent-rhel9
- none available: Fix deferred
rhoai/odh-kserve-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-controller-rhel9@sha256:344c4225761bc681101b7597088f7c23d43cac7ca09c24edb1f1c38e4b493059?repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9
- none available: Fix deferred
rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-router-rhel9@sha256:03c98651276c00e36133c1926d90738940703cd12b2d47e5a3aa865e4c1872af?repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9
- none available: Fix deferred
rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-storage-initializer-rhel9@sha256:48619d144fdf453a2ed670694d732ac71f7a3df00951dbdf62ee41a084f646cd?repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9
- none available: Fix deferred
rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-llm-d-kv-cache-rhel9@sha256:cb5eedeefd2578cd9bd8637250bbe299c84539f57b4ead75d630ed9f833a6ef2?repository_url=registry.redhat.io/rhoai/odh-llm-d-kv-cache-rhel9
- none available: Fix deferred
rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-th-torch-cuda-py312-rhel9@sha256:efd7b3607b699092c68359d20ef0d0043114191a097637667c0d2cf78fbea702?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9
- none available: Fix deferred
rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-vllm-gaudi-rhel9@sha256:87eec3862eb6ddef445f89dcf6fd89add7ef202ea7c563b1ee7347537fb3e250?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9
- none available: Fix deferred
All CVSS metrics
- HIGH 7.1 v4.0 · CNA Primary
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - MEDIUM 6.5 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - HIGH 7.1 v4.0 · NVD Secondary
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - MEDIUM 6.5 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
Exploit-tagged references (not proof of a PoC)
- https://github.com/vllm-project/vllm/security/advisories/GHSA-m52c-39rh-f3gp CVE record · VulnCheck · Updated 2026-10-12T16:05:06.956Z
CVE record · CISA-ADP · Updated 2026-10-18T11:51:50.426Z
NVD · CVE-2026-109311 · Updated 2026-10-18T12:17:04.637
Red Hat · CVE-2026-109311 · Updated 2026-10-18T12:01:42+00:00
Advisories
- https://www.vulncheck.com/advisories/vllm-before-0.29.0-heap-overflow-dos-via-iamf-audio-transcription-upload CVE record · VulnCheck · Updated 2026-10-12T16:05:06.956Z
NVD · CVE-2026-109311 · Updated 2026-10-18T12:17:04.637
Red Hat · CVE-2026-109311 · Updated 2026-10-18T12:01:42+00:00 - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109311.json Red Hat · CVE-2026-109311 · Updated 2026-10-18T12:01:42+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97613 EUVD · EUVD-2026-97613
Technical & other
- https://access.redhat.com/security/cve/CVE-2026-109311 Red Hat · CVE-2026-109311 · Updated 2026-10-18T12:01:42+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2549768 Red Hat · CVE-2026-109311 · Updated 2026-10-18T12:01:42+00:00
- https://www.cve.org/CVERecord?id=CVE-2026-109311 Red Hat · CVE-2026-109311 · Updated 2026-10-18T12:01:42+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2026-109311 Red Hat · CVE-2026-109311 · Updated 2026-10-18T12:01:42+00:00