PT-2026-53424 · Pypi · Executorch

Published 2026-06-29 · Updated 2026-06-29

OSV

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be

Fix

Related Identifiers

PYSEC-2026-333

Affected Products

Executorch

References · 7

• https://osv.dev/vulnerability/PYSEC-2026-333 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54949 · Security Note
• https://github.com/pytorch/executorch · Note
• https://github.com/pytorch/executorch/commit/ede82493dae6d2d43f8c424e7be4721abe5242be · Note
• https://facebook.com/security/advisories/cve-2025-54949 · Note
• https://pypi.org/project/executorch · Note
• https://github.com/advisories/GHSA-9m39-3mf3-xwch · Note