PT-2025-32320 · Unknown · Executorch

CVE-2025-30405 · Published 2025-08-07 · Updated 2026-06-29

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ExecuTorch versions prior to commit 0830af8207240df8d7f35b984cdf8bc35d74fa73

Description An integer overflow vulnerability exists in the loading of ExecuTorch models. This can lead to objects being placed outside of their allocated memory, potentially resulting in code execution or other undesirable effects.

Recommendations Update ExecuTorch to a version after commit 0830af8207240df8d7f35b984cdf8bc35d74fa73.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-30405

GHSA-84M3-F99P-CQX5

PYSEC-2026-332

Affected Products

Executorch

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/30xxx/CVE-2025-30405.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-30405 · Security Note
• https://osv.dev/vulnerability/GHSA-84m3-f99p-cqx5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-30405 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-332 · Vendor Advisory
• https://github.com/pytorch/executorch · Note
• https://github.com/pytorch/executorch/commit/0830af8207240df8d7f35b984cdf8bc35d74fa73 · Note
• https://pypi.org/project/executorch · Note
• https://twitter.com/f8sbrightermind/status/1953619805493137785 · Twitter Post
• https://t.me/cveNotify/131348 · Telegram Post
• https://twitter.com/CVEnew/status/1953596269538037837 · Twitter Post
• https://t.me/CVEtracker/29476 · Telegram Post
• https://facebook.com/security/advisories/cve-2025-30405 · Note
• https://twitter.com/VulmonFeeds/status/1953685286535192796 · Twitter Post
• https://github.com/advisories/GHSA-84m3-f99p-cqx5 · Note