Heap-based buffer overflow in Meta Platforms ExecuTorch
Priority LOW 36CWE-122Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and GitHub.
Summary
A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00421 36th percentileScored 2026-11-07
Fix Fixed executorch (PyPI): 0.7.0org.pytorch:executorch-android (Maven): 0.7.0-rc1+1 more product
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | executorch (PyPI) | before 0.7.0 | 0.7.0 | Patch available | GHSA-h952-963h-rv99 |
| — | org.pytorch:executorch-android (Maven) | before 0.7.0-rc1 | 0.7.0-rc1 | Patch available | GHSA-h952-963h-rv99 |
| — | github.com/pytorch/executorch (SwiftURL) | before 0.7.0-rc1 | 0.7.0-rc1 | Patch available | GHSA-h952-963h-rv99 |
- executorch (PyPI) Vendor— Affected before 0.7.0 Fixed in 0.7.0 Patch available GHSA-h952-963h-rv99
- org.pytorch:executorch-android (Maven) Vendor— Affected before 0.7.0-rc1 Fixed in 0.7.0-rc1 Patch available GHSA-h952-963h-rv99
- github.com/pytorch/executorch (SwiftURL) Vendor— Affected before 0.7.0-rc1 Fixed in 0.7.0-rc1 Patch available GHSA-h952-963h-rv99
Remediation
- Fix · GHSA-h952-963h-rv99 executorch (PyPI) Fixed in 0.7.0 Advisory →
- Fix · GHSA-h952-963h-rv99 org.pytorch:executorch-android (Maven) Fixed in 0.7.0-rc1 Advisory →
- Fix · GHSA-h952-963h-rv99 github.com/pytorch/executorch (SwiftURL) Fixed in 0.7.0-rc1 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2025-30402
- 2026-10-03 Alias added: GHSA-h952-963h-rv99
References
More Meta Platforms vulnerabilities
- TI-2025-34672 An integer overflow vulnerability in the loading of ExecuTorch models can cause… CVSS 3.1CRITICAL 9.8
- TI-2025-34671 Heap-based buffer overflow in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
- TI-2025-34670 Out-of-bounds read in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
- TI-2025-34669 Heap-based buffer overflow in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
- TI-2025-21707 Integer overflow in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
- TI-2025-21706 Integer overflow in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-30402 · CVE Program
- CVE-2025-30402 · NVD
- FIRST EPSS
- GHSA-h952-963h-rv99 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences