ExecuTorch vulnerable to Heap-based Buffer Overflow attack

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-30402 · ADVISORY
• pytorch/executorch commit 93b1a0c · WEB
• pytorch/executorch · PACKAGE
• facebook.com/security/advisories/cve-2025-30402 · WEB
• pypi.org/project/executorch · PACKAGE
• GitHub Advisory GHSA-h952-963h-rv99 · ADVISORY

org.pytorch:executorch-android のその他の脆弱性

• CVE-2025-54951緊急 9.8A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result…
• CVE-2025-54950緊急 9.8An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code exec…
• CVE-2025-54949緊急 9.8A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effec…
• CVE-2025-30405緊急 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, po…
• CVE-2025-30404緊急 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execu…