by Kastro
Paper/Archive/CVE-2025-30404

CVE-2025-30404

Meta Platforms, Inc ExecuTorch — An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code ex…

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 50.3.503 × 2010.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9dcba006.

Affected

ProductAffectedFixed inSource
ExecuTorch< https://github.com/pytorch/executorch/commit/d158236b1dc84539c1b16843bc74054c9dcba006https://github.com/pytorch/executorch/commit/d158236b1dc84539c1b16843bc74054c9dcba006CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reffacebook.com/security/advisories/cve-2025-30404refgithub.com/pytorch/executorch/commit/d158236b1dc84539c1b16843bc74054c9dcba006