Heap Buffer Overflow Vulnerability in ExecuTorch by Facebook
CVE-2025-30402

8.1HIGH

Key Information:

Vendor

Meta Platforms, Inc

Status
Executorch
Vendor
CVE Published:
11 July 2025

What is CVE-2025-30402?

A vulnerability exists in ExecuTorch that allows for a heap buffer overflow during the loading of its methods. This defect can lead to runtime crashes and may enable unauthorized code execution, as well as other unpredictable behavior affecting the software's integrity and reliability. Users and organizations utilizing affected versions should prioritize updates and implement security measures to mitigate associated risks.

Affected Version(s)

ExecuTorch 0

References

https://www.facebook.com/security/advisories/cve-2025-30402
x_refsource_CONFIRM
https://github.com/pytorch/executorch/commit/93b1a0c15f7e...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-30402 : Heap Buffer Overflow Vulnerability in ExecuTorch by Facebook