{"id":"ghsa-ghsa-8397-8qf6-f2gm","seq":2056925,"kind":"advisory","title":"vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine","url":"https://github.com/advisories/GHSA-8397-8qf6-f2gm","permalink":"https://vulnpulse.app/items/ghsa-ghsa-8397-8qf6-f2gm","summary":"影響: pip:vllm < 0.32.0 → 0.32.0\nThe Phi-4 multimodal audio encoder (phi4mm_audio.py / phi4mm_utils.py) runs its conformer attention in eager mode by default: the official HF config of microsoft/Phi-4-multimodal-instruct does not set use_pt_scaled_dot_product_attention, so the default False applies (phi4mm_audio.py:166, :876; phi4mm_utils.py:1669). The eager path fully materializes the attention probability matrix of shape [n_chunks, 16, 500, 500] per layer — and then stores it on the module: self.attn = attn (phi4mm_utils.py:…","severity":"medium","techs":["python"],"cves":["CVE-2026-115913"],"tags":["GHSA-8397-8qf6-f2gm","vllm"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-28T21:15:41.000Z","fetched_at":"2026-10-29T00:48:52.653Z"}