GHSA-9m39-3mf3-xwchCriticalCVSS 9.8
ExecuTorch heap buffer overflow vulnerability
🔗 CVE IDs covered (1)
📋 Description
A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be
🎯 Affected products3
- pip/executorch:< 0.7.0
- maven/org.pytorch:executorch-android:< 0.7.0
- swift/github.com/pytorch/executorch:< 0.7.0
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2025-54949
- https://github.com/pytorch/executorch/commit/ede82493dae6d2d43f8c424e7be4721abe5242be
- https://www.facebook.com/security/advisories/cve-2025-54949
- https://github.com/pypa/advisory-database/tree/main/vulns/executorch/PYSEC-2026-333.yaml
- https://pypi.org/project/executorch
- https://github.com/advisories/GHSA-9m39-3mf3-xwch