Evidence · DiggingBeagle record
vLLM DeepSeek-OCR valid zero-sum image engine crash, CVE-2026-115914
Advisory reproducing fatal engine behavior on legitimate balanced black/white image content.
- Source role
- primary disclosure
Evidence record
Advisory reproducing fatal engine behavior on legitimate balanced black/white image content.
Claim-level citations (2)
- supportsvLLM DeepSeek-OCR rejected a valid balanced image as a missing embedding: The vLLM advisory reproduces engine failure using valid DeepSeek-OCR image pixels whose normalized values sum to zero, rather than an invalid file format.
GHSA-gq5q-89c7-vhvx: normalized pixel sum, DeepSeek-OCR reproduction and fix
- supportsvLLM DeepSeek-OCR rejected a valid balanced image as a missing embedding: A DeepSeek-OCR image preprocessor in vLLM treated a zero-valued pixel sum as if the image embeddings were absent. The reproducer used a legitimate image whose normalized black and white pixels canceled out rather than a corrupted upload. The downstream embedding path failed and terminated the EngineCore service instead of returning a request-local error.
GHSA-gq5q-89c7-vhvx: normalized pixel sum, DeepSeek-OCR reproduction and fix