GHSA-78fp-cf4h-g36p

Suggest an improvement
Source
https://github.com/advisories/GHSA-78fp-cf4h-g36p
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-78fp-cf4h-g36p/GHSA-78fp-cf4h-g36p.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-78fp-cf4h-g36p
Downstream
Withdrawn
2026-09-11T19:18:42Z
Published
2026-06-20T21:31:21Z
Modified
2026-09-11T19:30:05Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Duplicate Advisory: vLLM introduced enhanced protection for CVE-2025-62164
Details

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-mcmc-2m55-j8jj. This link is maintained to preserve external references.

Original Description

vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests with malformed (negative or out-of-bounds) tensor indices, when the prompt-embeds feature is enabled, to trigger crashes or resource exhaustion (denial of service), with potential for out-of-bounds/write-what-where memory corruption. This continues CVE-2025-62164, whose prior fix only disabled the feature by default rather than addressing the root cause.

Database specific 
{
    "cwe_ids": [
        "CWE-20",
        "CWE-787"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-09-11T19:18:42Z",
    "nvd_published_at": "2026-06-20T19:16:23Z",
    "severity": "HIGH"
}
References

Affected packages

PyPI / vllm

Package

Name
vllm
View open source insights on deps.dev
Purl
pkg:pypi/vllm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0.10.2
Fixed
0.13.0

Affected versions

0.*
0.10.2
0.11.0
0.11.1
0.11.2
0.12.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-78fp-cf4h-g36p/GHSA-78fp-cf4h-g36p.json"