CVE-2025-54949

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects

Critical · published August 7, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

🔥 A heap buffer overflow in ExecuTorch could let attackers run code with deadly ease! 🤖 Think of it like a construction site where a contractor uses too many materials in a limited space—eventually, the excess spills over, causing chaos and allowing unauthorized access to all sorts of areas that should remain secure. This vulnerability could pave the way for a malicious actor to execute arbitrary code on your system, leading to catastrophic consequences like data breaches or system crashes. Imagine an uninvited guest throwing a wild party in your office—complete chaos, right?

Put simply

Think of it like a construction site where a contractor uses too many materials in a limited space—eventually, the excess spills over, causing chaos and allowing unauthorized access to all sorts of areas that should remain secure. Specifically, this vulnerability arises from the mishandling of memory spatial structures during the loading of ExecuTorch models, allowing for potential overwrites with harmful code.

What to do

This vulnerability could pave the way for a malicious actor to execute arbitrary code on your system, leading to catastrophic consequences like data breaches or system crashes. Imagine an uninvited guest throwing a wild party in your office—complete chaos, right? To defend against this threat, upgrade ExecuTorch to the version after commit ede82493dae6d2d43f8c424e7be4721abe5242be immediately. It's crucial to also conduct a thorough code audit to ensure that all model loading procedures follow best practices for memory safety. You've got this! With a quick patch and some vigilance, you’ll keep your systems secure and your status as a security hero intact! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00669 · 51.4th percentile
Published
2025-08-07T22:58Z
EPSS history
Timeline
  • 07 AUG 22:58Z
    A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects
    cvelistv5