ExecuTorch heap buffer overflow vulnerability
Date: 2025-08
Affected: swift/github.com/pytorch/executorch, maven/org.pytorch:executorch-android, pip/executorch
Attack vector: rce
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2025-54949
CWE: CWE-122
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be


Mitigations:

Architectural layers (MAESTRO):