Vulnerability details
CVE-2026-22778
vllm-project vLLM
vLLM leaks a heap address when PIL throws an error
CVSS 3.1
9.8Critical
Official description
vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an error. vLLM returns this error to the client, leaking a heap address. With this leak, we reduce ASLR from 4 billion guesses to ~8 guesses. This vulnerability can be chained a heap overflow with JPEG2000 decoder in OpenCV/FFmpeg to achieve remote code execution. This vulnerability is fixed in 0.14.1.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.8Critical | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 9.8Critical | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| vllm-project | vLLM | >= 0.8.3, < 0.14.1 | CVEProject cvelistV5 (CNA) |
References and advisories
15- https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvv x_refsource_CONFIRM
- https://github.com/vllm-project/vllm/pull/31987 x_refsource_MISC
- https://github.com/vllm-project/vllm/pull/32319 x_refsource_MISC
- https://github.com/vllm-project/vllm/releases/tag/v0.14.1 x_refsource_MISC
- https://access.redhat.com/security/cve/CVE-2026-22778 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2436113 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22778.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:3461 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3462 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30089 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30088 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30087 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3782 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3713 vendor-advisoryx_refsource_REDHAT
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-02-03
- Last updated
- 2026-07-15
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
18.28%
Probability of exploitation in 30 days
97.2%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-532Insertion of Sensitive Information into Log File
- CWE-209Generation of Error Message Containing Sensitive Information