CVE-2025-54951

9.8 criticalEPSS 0.7%

Critical (9.8). EPSS 0.7% chance of exploitation in the next 30 days. Fixed in executorch 0.7.0.

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-122
Published: 2025-08-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-xc7w-r669-48pf	PyPI	executorch	<0.7.0	0.7.0
GHSA-xc7w-r669-48pf	Maven	org.pytorch:executorch-android	<0.7.0	0.7.0
GHSA-xc7w-r669-48pf	SwiftURL	github.com/pytorch/executorch	<0.7.0	0.7.0
PYSEC-2026-336	PyPI	executorch	<0.7.0	0.7.0

References

https://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930c
https://www.facebook.com/security/advisories/cve-2025-54951

Check your stack JSON