ExecuTorch out-of-bounds access vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-54950 · ADVISORY
• pytorch/executorch commit b6b7a16 · WEB
• pytorch/executorch commit fb03b6f · WEB
• pypa/advisory-database · WEB
• pytorch/executorch · PACKAGE
• pypi.org/project/executorch · WEB
• facebook.com/security/advisories/cve-2025-54950 · WEB
• GitHub Advisory GHSA-f9hx-c6jf-3qxm · ADVISORY

Lỗ hổng khác của org.pytorch:executorch-android

• CVE-2025-54951NGHIÊM TRỌNG 9.8A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result…
• CVE-2025-54949NGHIÊM TRỌNG 9.8A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effec…
• CVE-2025-30405NGHIÊM TRỌNG 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, po…
• CVE-2025-30404NGHIÊM TRỌNG 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execu…
• CVE-2025-30402CAO 8.1A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code exec…