ExecuTorch vulnerable to Heap-based Buffer Overflow

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-54951 · ADVISORY
• pytorch/executorch commit cea9b23 · WEB
• pypa/advisory-database · WEB
• pytorch/executorch · PACKAGE
• pypi.org/project/executorch · WEB
• facebook.com/security/advisories/cve-2025-54951 · WEB
• GitHub Advisory GHSA-xc7w-r669-48pf · ADVISORY

org.pytorch:executorch-android のその他の脆弱性

• CVE-2025-54950緊急 9.8An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code exec…
• CVE-2025-54949緊急 9.8A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effec…
• CVE-2025-30405緊急 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, po…
• CVE-2025-30404緊急 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execu…
• CVE-2025-30402高 8.1A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code exec…