PT-2025-32324 · Unknown · Executorch

Published 2025-08-07 · Updated 2025-08-13 · CVE-2025-54952

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ExecuTorch versions prior to commit 8f062d3f661e20bb19b24b767b9a9a46e8359f2b

Description An integer overflow in the loading of ExecuTorch models can lead to the allocation of smaller-than-expected memory regions. This can potentially result in code execution or other undesirable effects.

Recommendations Update ExecuTorch to a version after commit 8f062d3f661e20bb19b24b767b9a9a46e8359f2b.

Fix

Weakness Enumeration

CWE-680

Related Identifiers

CVE-2025-54952

GHSA-33R8-VRX9-RMCV

Affected Products

Executorch

References · 12

• https://osv.dev/vulnerability/CVE-2025-54952 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54952 · Security Note
• https://osv.dev/vulnerability/GHSA-33r8-vrx9-rmcv · Vendor Advisory
• https://github.com/pytorch/executorch/commit/8f062d3f661e20bb19b24b767b9a9a46e8359f2b · Note
• https://github.com/pytorch/executorch · Note
• https://t.me/cveNotify/131353 · Telegram Post
• https://facebook.com/security/advisories/cve-2025-54952 · Note
• https://twitter.com/VulmonFeeds/status/1953672488560247096 · Twitter Post
• https://twitter.com/CVEnew/status/1953596265922482682 · Twitter Post
• https://twitter.com/cracbot/status/1955585176056021475 · Twitter Post
• https://twitter.com/f8sbrightermind/status/1953619800145498179 · Twitter Post
• https://t.me/CVEtracker/29481 · Telegram Post