ExecuTorch vulnerable to Heap-based Buffer Overflow attack

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-30402 · ADVISORY
• pytorch/executorch commit 93b1a0c · WEB
• pytorch/executorch · PACKAGE
• facebook.com/security/advisories/cve-2025-30402 · WEB
• pypi.org/project/executorch · PACKAGE
• GitHub Advisory GHSA-h952-963h-rv99 · ADVISORY

Lỗ hổng khác của org.pytorch:executorch-android

• CVE-2025-54951NGHIÊM TRỌNG 9.8A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result…
• CVE-2025-54950NGHIÊM TRỌNG 9.8An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code exec…
• CVE-2025-54949NGHIÊM TRỌNG 9.8A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effec…
• CVE-2025-30405NGHIÊM TRỌNG 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, po…
• CVE-2025-30404NGHIÊM TRỌNG 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execu…