CVE-2025-54951

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution…

Critical · published August 7, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
52.3
In the wild
Unconfirmed
What it is

🔥 A series of sneaky buffer overflow vulnerabilities in ExecuTorch can crash your runtime and may pave the way for an attacker to execute code — and that's no small feat! Think of it like a crowded elevator where too many people try to squeeze in at once, causing the system to overload and crash. In this scenario, if someone had malicious intent, they could take advantage of the chaos to gain control over the elevator's operations! If left unaddressed, this vulnerability could lead to a crash of your runtime environment, potentially allowing an attacker to execute arbitrary code and wreak havoc on your system. Imagine unwanted guests taking control just when you thought you were safe!

Put simply

Think of it like a crowded elevator where too many people try to squeeze in at once, causing the system to overload and crash. In this scenario, if someone had malicious intent, they could take advantage of the chaos to gain control over the elevator's operations! This vulnerability arises from a group of related buffer overflow flaws in ExecuTorch's model loading process, where excessive data can overflow memory boundaries, leading to runtime crashes and possible code execution.

What to do

If left unaddressed, this vulnerability could lead to a crash of your runtime environment, potentially allowing an attacker to execute arbitrary code and wreak havoc on your system. Imagine unwanted guests taking control just when you thought you were safe! To protect your systems, immediately update ExecuTorch to the latest version that includes commit cea9b23aa8ff78aff92829a466da97461cc7930c. Also, review your model loading procedures to ensure proper handling of data inputs. You've got this! With a quick update, you'll be on your way to securing your ExecuTorch environment! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00693 · 52.3th percentile
Published
2025-08-07T23:06Z
EPSS history
Timeline
  • 07 AUG 23:06Z
    A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution…
    cvelistv5