{
 "id": "AIR-2026-0315",
 "slug": "cve-2026-109311-vllm-audio-transcription-endpoint-heap-overf",
 "title": "CVE-2026-109311: vLLM audio transcription endpoint heap overflow vulnerability",
 "summary": "vLLM before version 0.29.0 improperly validates uploaded audio passed to FFmpeg, exposing an IAMF parser heap overflow. Remote attackers can upload malformed containers to corrupt the heap and crash the API process.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "vLLM"
 ],
 "incident_date": "2026-10-12",
 "incident_date_precision": "day",
 "first_reported": "2026-10-12",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109311",
   "publisher": "NVD",
   "title": "CVE-2026-109311: vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's…",
   "published_at": "2026-10-12"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-109311",
  "heap-overflow",
  "vllm"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}