CVE-2025-54951

State: Published
Severity: 9.8 Critical
Published: Aug 7, 2025
Updated: Aug 12, 2025
Reserved: Aug 1, 2025

Description

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-122 Heap-based Buffer Overflow

Affected Products

Product	Versions
ExecuTorchMeta Platforms, Inc	before https://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930cAffected

References

https://www.facebook.com/security/advisories/cve-2025-54951
https://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930c

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.