by Kastro
Paper/Archive/CVE-2025-54949

CVE-2025-54949

Meta Platforms, Inc ExecuTorch — A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable ef…

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 52.6.526 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be

Affected

ProductAffectedFixed inSource
ExecuTorch< https://github.com/pytorch/executorch/commit/ede82493dae6d2d43f8c424e7be4721abe5242behttps://github.com/pytorch/executorch/commit/ede82493dae6d2d43f8c424e7be4721abe5242beCNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reffacebook.com/security/advisories/cve-2025-54949refgithub.com/pytorch/executorch/commit/ede82493dae6d2d43f8c424e7be4721abe5242be