CVE-2025-46560 — Regex Denial of Service in Vllm

Vendor	Product	Version range	Fixed in
vllm-project	vllm	—	—
vllm	vllm	>= 0.8.0 < 0.8.5	0.8.5
vllm	vllm	>= 0.8.0 < 0.8.5	0.8.5

OSV

phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service

osv·2025-04-29

CVE-2025-46560 [MEDIUM] phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service ### Summary A critical performance vulnerability has been identified in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens (e.g., , ) with repeated tokens based on precomputed lengths. Due to inefficient list concatenation operations, the algorithm exhibits quadratic time complexity (O(n²)), allowing malicious actors to trigger resource exhaustion via specially crafted inputs. ### Details Affected Component: input_processor_for_phi4mm function. https://github.com/vllm-project/vllm/blob/8cac35ba435906fb7eb07e44fe1a8c26e8744f4e/vllm/model_executor/models/phi4mm.py#L1182-L1197 The code modifies the input_ids list in-place using input_i

GHSA

phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service

ghsa·2025-04-29

CVE-2025-46560 [MEDIUM] CWE-1333 phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service ### Summary A critical performance vulnerability has been identified in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens (e.g., , ) with repeated tokens based on precomputed lengths. Due to inefficient list concatenation operations, the algorithm exhibits quadratic time complexity (O(n²)), allowing malicious actors to trigger resource exhaustion via specially crafted inputs. ### Details Affected Component: input_processor_for_phi4mm function. https://github.com/vllm-project/vllm/blob/8cac35ba435906fb7eb07e44fe1a8c26e8744f4e/vllm/model_executor/models/phi4mm.py#L1182-L1197 The code modifies the input_ids list in-place using input_i

Red Hat

vllm: vLLM phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service

vendor_redhat·2025-04-30·CVSS 6.5

CVE-2025-46560 [MEDIUM] CWE-1333 vllm: vLLM phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service vllm: vLLM phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and prior to 0.8.5 are affected by a critical performance vulnerability in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens (e.g., , ) with repeated tokens based on precomputed lengths. Due to inefficient list concatenation operations, the algorithm exhibits quadratic time complexity (O(n²)), allowing malicious actors to trigger resource exhaustion via specially crafted inputs. This issue has been patched in version 0.8.5. A flaw was found in the vllm component. The affected versions of vllm have a performance v

CVE-2025-46560: vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and prior to 0.8.5 are affected by a…

Affected

CVSS provenance