Zyz3366

A remote attack can trigger uncontrolled memory allocation within the `llm-multimodal` component. The issue resides in the `jpeg turbo::decode jpeg rgb()` function located in the `crates/multimodal/src/jpeg turbo.rs` file.

A remote denial of service can be triggered through the Expert-Distribution Recording Endpoint. The issue resides in the `Scheduler.expert distribution handle()` function within the `python/sglang/srt/eplb/expert distribution.py` file.

A flaw in the Weight Exporter component allows a remote attacker to cause a denial of service. This occurs through the manipulation of the `group name` argument within the `WeightExporter.send weights to remote instance()` function located in the python/sglang/srt/model executor/model runner components/weight exporter.py file.

A remote issue exists within the Session Cleanup component, specifically in the `Session.create req()` function located in the `python/sglang/srt/session/session controller.py` file. Manipulation of this function can lead to a denial of service, which occurs when a system becomes unavailable to its intended users.

A remote denial of service can be triggered through the manipulation of the `session params` argument within the generate endpoint, specifically affecting the functionality in the file python/sglang/srt/managers/io struct.py.

A flaw in the Penalty Handler component allows remote attackers to cause a denial of service. The issue resides in the `get token bin counts and mask()` function within the `vllm/model executor/layers/utils.py` file.

A remote out-of-bounds read can occur within the Completions Request Handler component. The issue resides in the `conv ssm forward()` function located in the `vllm/model executor/layers/mamba/mamba mixer2.py` file.

A flaw in the `Gemma4UnifiedParser` component, specifically within the file `rust/src/parser/src/unified/gemma4.rs`, allows a remote attacker to cause a denial of service through specific manipulation.

A remote issue exists in the Jinja Template Rendering component. Manipulation of the `chat template` argument at the '/v1/chat/completions' endpoint leads to excessive resource consumption.

A flaw in the tiktoken vocab File Handler component allows a local attacker to cause a denial of service. The issue resides in the `TiktokenTokenizer::new()` function within the file rust/src/text/src/backend/hf/mod.rs.

A denial of service issue exists in the Node Header Handler component within the file `src/pull parser/v7400/parser.rs`. A local attacker can manipulate this component to cause the application to become unavailable.

A flaw in the Metadata Handler component allows a local attacker to cause a denial of service.

A flaw in the UTF-8 Character Handler component allows local execution of a manipulation that can lead to a denial of service. The issue resides in the `grass compiler::raw to parse error()` function.

A local manipulation of the `grass compiler::selector::extend/grass compiler::evaluate::visitor` function can lead to a denial of service. This occurs because the `@extend` algorithm is definitionally exponential, meaning the time required to compile the input does not increase linearly.

An issue exists within the Inference HTTP Endpoint component in the file python/sglang/srt/lora/lora manager.py. Remote manipulation of the `lora path` argument can trigger a reachable assertion. This attack is characterized by high complexity and is considered difficult to exploit.

A remote denial of service can be triggered through improper processing within the OpenAI-compatible Serving Path component.

A flaw in the KV Block Handler component, specifically within the `has mamba layers()` function of the `vllm/v1/kv cache interface.py` file, allows for an uninitialized resource through manipulation. This issue can be triggered remotely, although the attack complexity is high and exploitability is difficult.