This vulnerability occurs when the model receives uploaded audio files. The system passes the audio to FFmpeg’s IAMF parser with only a file‑size check, allowing a malformed IAMF container to trigger a heap overflow in FFmpeg. When exploited, the overflow corrupts the heap, crashes the process, and results in a denial‑of‑service. The weakness is an input validation flaw (CWE‑20) and a heap‑based buffer overflow (CWE‑787).

vLLM (vllm‑project), all releases before 0.29.0.

The vulnerability has a CVSS score of 7.1, indicating a high impact if exploited. The EPSS score of < 1% indicates a low likelihood of exploitation in the wild, but because the flaw requires authenticated remote uploads, an attacker must have API credentials to trigger it. If credentials are compromised or shared, repeated uploads of malformed containers can repeatedly crash the service. The CVE is not listed in the CISA KEV catalog, so there is no known public exploit at the time of this analysis. Nonetheless, the nature of the overflow and the lack of input validation make it a high‑priority target for malicious actors to cause service interruption.