CVE-2026-116175: vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions

Q: Who can exploit this issue?

An attacker needs authenticated access sufficient to submit requests to the /v1/chat/completions endpoint. They can provide the malicious audio through either the input_audio or audio_url request field.

Q: What deployments are affected?

vLLM versions from 0.19.0 up to, but not including, 0.24.0 are affected when the AudioMediaIO multimodal processing path handles audio in chat-completion requests.

Q: What is the practical impact of exploitation?

A small compressed audio payload can expand into a very large decoded PCM representation because no decoded-duration limit is applied. This can exhaust server memory and cause a denial of service.

Published Oct 25, 2026

Updated

vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path calls loadaudio without the maxdurations decoded-duration limit. Authenticated attackers can send small compressed audio via inputaudio or audiourl in /v1/chat/completions requests that expands to huge decoded PCM, exhausting server memory.

Affected Software

1 affected component

vllm vllm>=0.19.0<0.24.0

Event History

Oct 25, 2026

CVE Published

via MITRE·01:20 PM

Data Sourced

via MITRE·01:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs authenticated access sufficient to submit requests to the /v1/chat/completions endpoint. They can provide the malicious audio through either the input_audio or audio_url request field.

What deployments are affected?

vLLM versions from 0.19.0 up to, but not including, 0.24.0 are affected when the AudioMediaIO multimodal processing path handles audio in chat-completion requests.

What is the practical impact of exploitation?

A small compressed audio payload can expand into a very large decoded PCM representation because no decoded-duration limit is applied. This can exhaust server memory and cause a denial of service.

CVE-2026-116175: vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What deployments are affected?

What is the practical impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What deployments are affected?

What is the practical impact of exploitation?