PT-2025-32319 · Unknown · Executorch

Published 2025-08-07 · Updated 2025-08-08 · CVE-2025-30404

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ExecuTorch versions prior to d158236b1dc84539c1b16843bc74054c9dcba006

Description An integer overflow in the loading of ExecuTorch models can lead to overlapping allocations, potentially resulting in code execution.

Recommendations Update ExecuTorch to a version after commit d158236b1dc84539c1b16843bc74054c9dcba006.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-30404

GHSA-HJ95-MHGF-JXC4

Affected Products

Executorch

References · 12

• https://osv.dev/vulnerability/CVE-2025-30404 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30404 · Security Note
• https://osv.dev/vulnerability/GHSA-hj95-mhgf-jxc4 · Vendor Advisory
• https://github.com/pytorch/executorch/commit/d158236b1dc84539c1b16843bc74054c9dcba006 · Note
• https://github.com/pytorch/executorch · Note
• https://t.me/cveNotify/131347 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1953687846318944456 · Twitter Post
• https://twitter.com/CVEnew/status/1953596270590701643 · Twitter Post
• https://twitter.com/f8sbrightermind/status/1953619806629863927 · Twitter Post
• https://t.me/cveNotify/131516 · Telegram Post
• https://t.me/CVEtracker/29475 · Telegram Post
• https://facebook.com/security/advisories/cve-2025-30404 · Note