ExecuTorch integer overflow vulnerability leads to code execution

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-54952 · ADVISORY
• pytorch/executorch commit 8f062d3 · WEB
• pytorch/executorch · PACKAGE
• facebook.com/security/advisories/cve-2025-54952 · WEB
• pypi.org/project/executorch · PACKAGE
• GitHub Advisory GHSA-33r8-vrx9-rmcv · ADVISORY

Lỗ hổng khác của executorch

• CVE-2025-54951NGHIÊM TRỌNG 9.8A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result…
• CVE-2025-54950NGHIÊM TRỌNG 9.8An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code exec…
• CVE-2025-54949NGHIÊM TRỌNG 9.8A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effec…
• CVE-2025-30405NGHIÊM TRỌNG 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, po…
• CVE-2025-30404NGHIÊM TRỌNG 9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execu…