HIGHCVSS 8.1EPSS 0.4%

CVE-2025-30402

ExecuTorch vulnerable to Heap-based Buffer Overflow attack

Published: 2025-07-11
Modified: 2026-08-21
EPSS percentile: 30%
Aliases: GHSA-h952-963h-rv99
Sources: github-advisory

Summary

A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
Maven	org.pytorch:executorch-android	—	0.7.0-rc1
PyPI	executorch	—	0.7.0
SwiftURL	github.com/pytorch/executorch	—	0.7.0-rc1

Remediation: Upgrade to 0.7.0-rc1 or later.

References

https://github.com/advisories/GHSA-h952-963h-rv99

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.