High 7.5Published Jun 11, 2026

CVE-2026-5497Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm

Updated under an hour ago (Oct 27, 2026, 11:50 AM ET)

Does this affect you?

It affects vllm-project/vllm and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for vllm-project/vllm

Exploited in the last 30 days

vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method. When processing `video/jpeg` data URLs, the method splits the base64 data string on commas to extract individual JPEG frames without enforcing a frame count limit. An attacker can exploit this by crafting a single API request containing thousands of comma-separated base64-encoded JPEG frames in a data URL, causing the server to decode all frames into memory and crash due to excessive memory consumption. This vulnerability is reachable via the OpenAI-compatible chat completions API and does not require authentication.

CVSS: 7.5 HIGH (v3.0, CNA)CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-400, CWE-770
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: @huntr_ai
NVD analysis: Modified
Record last updated: Jul 22, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

vllm-project vllm-project/vllm vllm_project:vllm (from the name)	from unspecified before 0.19.0	CNA record
Red Hat Red Hat AI Inference Server redhat:ai_inference_server	3	CISA ADP
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 redhat:enterprise_linux_ai	3	CISA ADP
Red Hat Red Hat OpenShift AI (RHOAI) redhat:openshift_ai	Versions not stated	CISA ADP
vllm vllm vllm:vllm	from 0.8.0 before 0.19.0	NVD

References

References

https://huntr.com/bounties/7bd92629-b396-4449-8f88-6c0092530eb4	exploit, third-party-advisory
https://github.com/vllm-project/vllm/commit/58ee61422169ce17e08248f8efa1e9df434fe395	patch
https://access.redhat.com/security/cve/CVE-2026-5497
https://bugzilla.redhat.com/show_bug.cgi?id=2487813
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5497.json

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.