CERT24PYSEC-2026-4347: vLLM off-by-one error in pre-tokenized input validationLoading data…
CERT24Threat Observatory
Period

PYSEC-2026-4347: vLLM off-by-one error in pre-tokenized input validation

Before v0.32.0, vLLM contained an off-by-one error when calculating the maximum token ID. Under specific conditions, a pre-tokenized request can terminate the vLLM engine with a CUDA device-side assertion.

← Back to intelligence

PYSEC-2026-4347: vLLM off-by-one error in pre-tokenized input validation

Before v0.32.0, vLLM contained an off-by-one error when calculating the maximum token ID. Under specific conditions, a pre-tokenized request can terminate the vLLM engine with a CUDA device-side assertion.