CVE-2026-53923

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-53923
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53923.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-53923
Aliases
Downstream
Related
Published
2026-06-22T21:55:42.001Z
Modified
2026-08-12T16:41:10.606839Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflow
Details

vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels (csrc/quantization/gguf/gguf_kernel.cu) causes partial tensor processing. The output tensor is allocated at full size via torch::empty (uninitialized memory), but the dequantize CUDA kernel processes only a truncated number of elements. The unfilled portion of the output tensor retains whatever was previously in GPU memory. In multi-tenant inference deployments, this residual GPU memory may contain tensor data from other users' inference requests, constituting information disclosure. This vulnerability is fixed in 0.23.1rc0.

Database specific 
{
    "cwe_ids": [
        "CWE-200",
        "CWE-681"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53923.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/vllm-project/vllm

Affected ranges

Type
GIT
Repo
https://github.com/vllm-project/vllm
Events
Introduced
09c7792610ada9f88bbf87d32b472dd44bf23cc2
Fixed
f219788f91952827132fa4fdf916427cd20d225e
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0.5.5"
        },
        {
            "fixed": "0.23.1rc0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v0.*
v0.10.0
v0.10.0rc1
v0.10.0rc2
v0.10.1rc1
v0.10.2rc1
v0.10.2rc2
v0.11.0rc1
v0.11.1
v0.11.1rc0
v0.11.1rc1
v0.11.1rc2
v0.11.1rc3
v0.11.1rc4
v0.11.1rc5
v0.11.1rc6
v0.13.0rc1
v0.14.0rc0
v0.14.0rc1
v0.15.0rc1
v0.15.2rc0
v0.16.0rc0
v0.16.0rc1
v0.17.0rc0
v0.17.1rc0
v0.17.2rc0
v0.18.0rc0
v0.18.1rc0
v0.18.2rc0
v0.19.1rc0
v0.19.2rc0
v0.20.1rc0
v0.20.2rc0
v0.21.1rc0
v0.22.1rc0
v0.5.5
v0.6.0
v0.6.1
v0.6.1.post1
v0.6.1.post2
v0.6.2
v0.6.3
v0.6.3.post1
v0.6.4
v0.6.4.post1
v0.6.5
v0.6.6
v0.6.6.post1
v0.7.0
v0.7.1
v0.7.2
v0.7.3
v0.8.0rc1
v0.8.0rc2
v0.8.1
v0.8.2
v0.8.3rc1
v0.8.4
v0.9.0
v0.9.1
v0.9.1rc1
v0.9.1rc2
v0.9.2rc1

Database specific

vanir_signatures_modified 
"2026-08-12T16:41:10Z"
vanir_signatures 
[
    {
        "id": "CVE-2026-53923-f2bf7ca8",
        "deprecated": false,
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "118265656872246360285709774639688387291",
                "61465877030539699673395513370793171388",
                "272548032624709417653722042097387448651",
                "319359192550244661342327622333718076226"
            ]
        },
        "source": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e",
        "target": {
            "file": "csrc/libtorch_stable/quantization/gguf/ggml-common.h"
        }
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53923.json"