Integer Overflow Vulnerability in ExecuTorch by PyTorch
CVE-2025-54952

9.8CRITICAL

Key Information:

Vendor

Meta Platforms, Inc

Status
Executorch
Vendor
CVE Published:
8 August 2025

What is CVE-2025-54952?

An integer overflow vulnerability arises in the process of loading ExecuTorch models, leading to the allocation of smaller-than-expected memory regions. This flaw can potentially enable unintended code execution or other negative consequences. Users of ExecuTorch should ensure they are using a version that incorporates security updates to mitigate these risks.

Affected Version(s)

ExecuTorch 0

References

https://www.facebook.com/security/advisories/cve-2025-54952
x_refsource_CONFIRM
https://github.com/pytorch/executorch/commit/8f062d3f661e...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.