Evidence · DiggingBeagle record
vLLM advisory: EPS disguised as PNG reaches Ghostscript via Pillow
vLLM advisory: EPS disguised as PNG reaches Ghostscript via Pillow
- Source role
- primary disclosure
Evidence record
vLLM advisory: EPS disguised as PNG reaches Ghostscript via Pillow
Claim-level citations (2)
- supportsvLLM image format autodetection could reach an installed vulnerable Ghostscript: The vLLM author reproduced marker-command execution through ImageMediaIO.load_base64() on vLLM 0.30.0 with vulnerable Ghostscript 10.03.0, but traced rather than executed the full model-backed HTTP request path.
GHSA-h3rc-j82p-2c3h, Proof of Concept and Environment, loader-level execution versus HTTP
- supportsvLLM image format autodetection could reach an installed vulnerable Ghostscript: An advisory traces image payloads with EPS content through permissive Pillow format detection into Ghostscript, and reports execution in a tested vLLM 0.30.0 environment with Ghostscript 10.03.0. vLLM 0.32.0 restricts formats; Ghostscript 10.03.1 fixed the underlying interpreter issue.
Description, reproduction environment, Ghostscript dependency and fixed versions