Description
vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an error. vLLM returns this error to the client, leaking a heap address. With this leak, we reduce ASLR from 4 billion guesses to ~8 guesses. This vulnerability can be chained a heap overflow with JPEG2000 decoder in OpenCV/FFmpeg to achieve remote code execution. This vulnerability is fixed in 0.14.1.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| vllm-project | vllm | >= 0.8.3, < 0.14.1 |
| Red Hat | Red Hat AI Inference Server 3.2 | — |
| Red Hat | Red Hat AI Inference Server 3.2 | — |
| Red Hat | Red Hat AI Inference Server 3.3 | — |
| Red Hat | Red Hat AI Inference Server 3.3 | — |
| Red Hat | Red Hat AI Inference Server 3.3 | — |
| Red Hat | Red Hat OpenShift AI 2.25 | — |
| Red Hat | Red Hat OpenShift AI 2.25 | — |
| Red Hat | Red Hat OpenShift AI 2.25 | — |
| Red Hat | Red Hat OpenShift AI 2.25 | — |
| Red Hat | Red Hat OpenShift AI 3.3 | — |
| Red Hat | Red Hat OpenShift AI 3.3 | — |
| Red Hat | Red Hat AI Inference Server | — |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | — |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | — |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | — |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — |
References
- https://github.com/vllm-project/vllm/pull/31987Issue Tracking, Patch
- https://github.com/vllm-project/vllm/pull/32319Issue Tracking, Patch
- https://github.com/vllm-project/vllm/releases/tag/v0.14.1Release Notes
- https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvvVendor Advisory
- https://access.redhat.com/errata/RHSA-2026:19712
- https://access.redhat.com/errata/RHSA-2026:30087
- https://access.redhat.com/errata/RHSA-2026:30088
- https://access.redhat.com/errata/RHSA-2026:30089
- https://access.redhat.com/errata/RHSA-2026:3461
- https://access.redhat.com/errata/RHSA-2026:3462
- https://access.redhat.com/errata/RHSA-2026:3713
- https://access.redhat.com/errata/RHSA-2026:3782
- https://access.redhat.com/security/cve/CVE-2026-22778
- https://bugzilla.redhat.com/show_bug.cgi?id=2436113
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22778.json
Timeline
- Published
- Feb 2, 2026
- Last modified
- Jul 15, 2026
- NVD status
- Modified