Low
vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
Type: advisorySources: OSV
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-105775
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 18:13 UTC · Revision 1
Source evidence
vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
core-osv · Original sourcePublished 6 Oct 2026, 05:45 UTC
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
osv:CVE-2026-105775
Complete source record
{
"id": "7012e9ca0498c033f62dcd2c9daf19bac855abbf26e6c0314bc186871d73ea43",
"url": "https://osv.dev/vulnerability/CVE-2026-105775",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds",
"summary": "A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.",
"evidence": "osv:CVE-2026-105775",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2026-105775",
"aliases": [
"CVE-2026-105775"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/vllm-project/vllm",
"type": "GIT",
"events": [
{
"introduced": "67d96c29fba9b72cb4c4edbc26211c208a00ebdd"
},
{
"last_affected": "db9527a46873454610df6dbedf79a36d6bf1a7f6"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0.1"
},
{
"last_affected": "0.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.2"
},
{
"last_affected": "0.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.3"
},
{
"last_affected": "0.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.4"
},
{
"last_affected": "0.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.5"
},
{
"last_affected": "0.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.6"
},
{
"last_affected": "0.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.7"
},
{
"last_affected": "0.7"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.8"
},
{
"last_affected": "0.8"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.9"
},
{
"last_affected": "0.9"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.10"
},
{
"last_affected": "0.10"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.11"
},
{
"last_affected": "0.11"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.12"
},
{
"last_affected": "0.12"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.13"
},
{
"last_affected": "0.13"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.14"
},
{
"last_affected": "0.14"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.15"
},
{
"last_affected": "0.15"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.16"
},
{
"last_affected": "0.16"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.17"
},
{
"last_affected": "0.17"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.18"
},
{
"last_affected": "0.18"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.19"
},
{
"last_affected": "0.19"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.20"
},
{
"last_affected": "0.20"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.21"
},
{
"last_affected": "0.21"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.22"
},
{
"last_affected": "0.22"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.23"
},
{
"last_affected": "0.23"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.24"
},
{
"last_affected": "0.24"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.25"
},
{
"last_affected": "0.25"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.26"
},
{
"last_affected": "0.26"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.27"
},
{
"last_affected": "0.27"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.28"
},
{
"last_affected": "0.28"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.29"
},
{
"last_affected": "0.29"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.30"
},
{
"last_affected": "0.30"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0.31.0"
},
{
"last_affected": "0.31.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0"
},
{
"last_affected": "0.31.0"
}
],
"source": "DESCRIPTION"
}
]
}
}
],
"versions": [
"0.1",
"0.10",
"0.11",
"0.12",
"0.13",
"0.14",
"0.15",
"0.16",
"0.17",
"0.18",
"0.19",
"0.2",
"0.20",
"0.21",
"0.22",
"0.23",
"0.24",
"0.25",
"0.26",
"0.27",
"0.28",
"0.29",
"0.3",
"0.30",
"0.31.0",
"0.4",
"0.5",
"0.6",
"0.7",
"0.8",
"0.9",
"v0.31.0rc5",
"v0.31.0",
"v0.31.0rc4",
"v0.31.0rc3",
"v0.31.0rc2",
"v0.31.0rc1",
"v0.30.1rc0",
"proto-v0.3.0",
"proto-v0.2.0",
"v0.29.1rc0",
"proto-v0.1.0",
"v0.28.1rc0",
"v0.27.2rc0",
"v0.26.1rc0",
"v0.25.0",
"v0.23.1rc0",
"v0.22.1rc0",
"v0.21.1rc0",
"v0.20.2rc0",
"v0.20.1rc0",
"v0.19.2rc0",
"v0.19.1rc0",
"v0.18.2rc0",
"v0.18.1rc0",
"v0.17.2rc0",
"v0.18.0rc0",
"v0.17.1rc0",
"v0.17.0rc0",
"v0.16.0rc1",
"v0.15.2rc0",
"v0.16.0rc0",
"v0.15.0rc1",
"v0.14.0rc1",
"v0.14.0rc0",
"v0.13.0rc1",
"v0.11.1",
"v0.11.1rc6",
"v0.11.1rc5",
"v0.11.1rc4",
"v0.11.1rc3",
"v0.11.1rc2",
"v0.11.1rc1",
"v0.11.1rc0",
"v0.11.0rc1",
"v0.10.2rc2",
"v0.10.2rc1",
"v0.10.1rc1",
"v0.10.0rc2",
"v0.10.0",
"v0.10.0rc1",
"v0.9.2rc1",
"v0.9.1rc2",
"v0.9.1",
"v0.9.1rc1",
"v0.9.0",
"v0.8.4",
"v0.8.3rc1",
"v0.8.2",
"v0.8.1",
"v0.8.0rc2",
"v0.8.0rc1",
"v0.7.3",
"v0.7.2",
"v0.7.1",
"v0.7.0",
"v0.6.6.post1",
"v0.6.6",
"v0.6.5",
"v0.6.4.post1",
"v0.6.4",
"v0.6.3.post1",
"v0.6.3",
"v0.6.2",
"v0.6.1.post2",
"v0.6.1.post1",
"v0.6.1",
"v0.6.0",
"v0.5.5",
"v0.5.4",
"v0.5.3.post1",
"v0.5.3",
"v0.5.2",
"v0.5.1",
"v0.5.0.post1",
"v0.5.0",
"v0.4.3",
"v0.4.2",
"v0.4.1",
"v0.4.0.post1",
"v0.4.0",
"v0.3.3",
"v0.3.2",
"v0.3.1",
"v0.3.0",
"v0.2.7",
"v0.2.6",
"v0.2.5",
"v0.2.4",
"v0.2.3",
"v0.2.2",
"v0.2.1",
"v0.2.0",
"v0.1.7",
"v0.1.6",
"v0.1.5",
"v0.1.4",
"v0.1.3",
"v0.1.2",
"v0.1.1",
"v0.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105775.json"
}
}
],
"modified": "2026-10-28T02:30:22.223248956Z",
"provider": "osv",
"references": [
"https://github.com/vllm-project/vllm/",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105775.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-105775",
"https://vuldb.com/cve/CVE-2026-105775",
"https://vuldb.com/submit/992291",
"https://vuldb.com/vuln/413808",
"https://github.com/vllm-project/vllm/issues/57266",
"https://vuldb.com/vuln/413808/cti"
],
"provider_metadata": {
"cwe_ids": [
"CWE-119",
"CWE-125"
],
"cna_assigner": "VulDB",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105775.json"
}
},
"related_cves": [
{
"value": "CVE-2026-105775",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 488171,
"published_at": "2026-10-06T05:45:11.082+00:00"
}