CVE-2025-54951

CRITICAL9.8

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects

Published Aug 7, 2025

Modified 5 months ago

Details

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c.

References

WEBhttps://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930c ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-54951 WEBhttps://www.facebook.com/security/advisories/cve-2025-54951

CVSS Analysis

CVSS v3.1

9.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedAug 7, 2025

ModifiedAug 12, 2025