CVE-2025-54949
CVE-2025-54949
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be
CVSS 9.8 · Critical · EPSS 0.7% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
executorch
- Versions
- ≥ 0, < https://github.com/pytorch/executorch/commit/ede82493dae6d2d43f8c424e7be4721abe5242be: Affected (git)
No fix published
executorch PyPI
- Versions
- 0.1.0
- 0.1.2
- 0.2.0
- 0.2.1
- 0.3.0
- 0.4.0
- 0.5.0
- 0.6.0
- Affected ranges
- ECOSYSTEM: < 0.7.0
Update to 0.7.0
org.pytorch:executorch-android Maven
- Versions
- 0.5.0
- 0.5.1
- 0.6.0
- 0.6.0-rc1
- 0.6.0-rc3
- 0.6.0-rc4
- 0.6.0-rc6
- 0.7.0-rc1
- 0.7.0-rc2
- 0.7.0-rc5
- Affected ranges
- ECOSYSTEM: < 0.7.0
Update to 0.7.0
github.com/pytorch/executorch SwiftURL
- Affected ranges
- SEMVER: < 0.7.0
Update to 0.7.0