CVE-2025-54952

An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in…

Critical · published August 7, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
48.8
In the wild
Unconfirmed
What it is

🔥 An integer overflow in ExecuTorch models could lead to unexpected memory allocations, paving the way for code execution. Sounds like a recipe for disaster, right? ⚡ Think of it like a restaurant that miscalculates its ingredient quantities. Instead of enough flour for the cake, it ends up with just a pinch, leading to a half-baked disaster when the cake collapses! An attacker could exploit this overflow to execute arbitrary code, potentially giving them full control over your system. The result can be absolutely devastating – imagine losing sensitive data or even shutting down critical services!

Put simply

Think of it like a restaurant that miscalculates its ingredient quantities. Instead of enough flour for the cake, it ends up with just a pinch, leading to a half-baked disaster when the cake collapses! This vulnerability allows malfunctions in memory allocation during the loading of ExecuTorch models, enabling the possibility of executing malicious code due to improperly sized memory regions.

What to do

An attacker could exploit this overflow to execute arbitrary code, potentially giving them full control over your system. The result can be absolutely devastating – imagine losing sensitive data or even shutting down critical services! Update ExecuTorch to the latest version, specifically after commit 8f062d3f661e20bb19b24b767b9a9a46e8359f2b, to mitigate this threat. Regularly audit your software for any additional vulnerabilities to ensure robust security. 🛡️ This is fixable! Take these steps to secure your system and you'll be back in the game in no time. You've got this! 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00614 · 48.8th percentile
Published
2025-08-07T23:08Z
EPSS history
Timeline
  • 07 AUG 23:08Z
    An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in…
    cvelistv5