Bug 2546207 (CVE-2026-105760) - CVE-2026-105760 vllm: vllm: Denial of Service via excessive resource consumption in GLMGA video backend
Summary: CVE-2026-105760 vllm: vllm: Denial of Service via excessive resource consumpt...
Keywords:
Status: NEW
Alias: CVE-2026-105760
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-05 23:11 UTC by OSIDB Bzimport
Modified: 2026-10-05 23:13 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-05 23:11:18 UTC
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level media_io_kwargs field to select the GLMGA video backend and supply large values for the fps and max_frames options without a strict work ceiling. GLMGA constructs and deduplicates an attacker-sized pre-decode frame-index list, allowing a compact request and tiny valid video to consume disproportionate CPU time and memory in the shared media-loading executor. This issue is fixed in version 0.30.0.


Note You need to log in before you can comment on or make changes to this bug.