PT-2025-32320 · Unknown · Executorch

Published 2025-08-07 · Updated 2025-08-08 · CVE-2025-30405

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ExecuTorch versions prior to commit 0830af8207240df8d7f35b984cdf8bc35d74fa73

Description An integer overflow vulnerability exists in the loading of ExecuTorch models. This can lead to objects being placed outside of their allocated memory, potentially resulting in code execution or other undesirable effects.

Recommendations Update ExecuTorch to a version after commit 0830af8207240df8d7f35b984cdf8bc35d74fa73.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-30405

GHSA-84M3-F99P-CQX5

Affected Products

Executorch

References · 12

• https://osv.dev/vulnerability/GHSA-84m3-f99p-cqx5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-30405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30405 · Security Note
• https://github.com/pytorch/executorch/commit/0830af8207240df8d7f35b984cdf8bc35d74fa73 · Note
• https://github.com/pytorch/executorch · Note
• https://twitter.com/VulmonFeeds/status/1953685286535192796 · Twitter Post
• https://t.me/CVEtracker/29476 · Telegram Post
• https://t.me/cveNotify/131517 · Telegram Post
• https://twitter.com/CVEnew/status/1953596269538037837 · Twitter Post
• https://twitter.com/f8sbrightermind/status/1953619805493137785 · Twitter Post
• https://facebook.com/security/advisories/cve-2025-30405 · Note
• https://t.me/cveNotify/131348 · Telegram Post