AIHacker Noonabout 10 hours ago
CVE-2026-53923 Leaks GPU Memory in vLLM
13 min read
A 32-bit integer truncation in vLLM's GGUF dequantization kernels causes output tensors to be partially filled with uninitialized GPU memory. In multi-tenant serving, that memory can contain another user's data. The vulnerability is rated CVSS 5.3 and affects four functions in gguf_kernel.cu that use torch::empty followed by a kernel bounded by a narrowed dimension.
Level
Hype check
Tap to vote and see what everyone thinks.
