CVE-2025-30402

8.1 highEPSS 0.4%

High (8.1). EPSS 0.4% chance of exploitation in the next 30 days. Fixed in executorch 0.7.0.

A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-11-01)
Published: 2025-07-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-h952-963h-rv99	PyPI	executorch	<0.7.0	0.7.0
GHSA-h952-963h-rv99	Maven	org.pytorch:executorch-android	<0.7.0-rc1	0.7.0-rc1
GHSA-h952-963h-rv99	SwiftURL	github.com/pytorch/executorch	<0.7.0-rc1	0.7.0-rc1
PYSEC-2026-1352	PyPI	executorch	<0.7.0	0.7.0

References

https://github.com/pytorch/executorch/commit/93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f
https://www.facebook.com/security/advisories/cve-2025-30402

Check your stack JSON