CVE-2025-54950

An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other…

Critical · published August 7, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds access in ExecuTorch models could crash your runtime or worse! 🔥 Watch out, this is serious business! Think of it like a train barreling down the tracks with a miscalibrated signal. If the signal mishandles a command, the train can go off the rails, leading to a catastrophic derailment. That's what happens here — your models could go rogue! This vulnerability can cause your runtime to crash, and in the worst case, it opens the door for potential code execution by malicious actors. Imagine the chaos if an intruder gains control — they could wreak havoc on your system, possibly stealing data or compromising sensitive operations. Yikes!

Put simply

Think of it like a train barreling down the tracks with a miscalibrated signal. If the signal mishandles a command, the train can go off the rails, leading to a catastrophic derailment. That's what happens here — your models could go rogue! The vulnerability resides in the ExecuTorch model loader, allowing out-of-bounds access that can lead to crashes or arbitrary code execution if exploited. The flaw occurs before commit b6b7a16df5e7852d976d8c34c8a7e9a1b6f7d005, which means older versions are at risk.

What to do

This vulnerability can cause your runtime to crash, and in the worst case, it opens the door for potential code execution by malicious actors. Imagine the chaos if an intruder gains control — they could wreak havoc on your system, possibly stealing data or compromising sensitive operations. Yikes! To safeguard against this threat, immediately update your ExecuTorch to the latest version that includes commit b6b7a16df5e7852d976d8c34c8a7e9a1b6f7d005. It's critical to audit your implementation and test thoroughly to ensure no other vulnerabilities exist. Prioritize this fix in your security maintenance! You've got this! With a quick patch, you'll be back on track and your systems will be safe again! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00619 · 49.0th percentile
Published
2025-08-07T23:03Z
EPSS history
Timeline
  • 07 AUG 23:03Z
    An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other…
    cvelistv5