CriticalFix available
ExecuTorch heap buffer overflow vulnerability
Type: advisorySources: OSV
A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be
- Products
- executorch, github.com/pytorch/executorch, org.pytorch:executorch-android
- Affected versions
- 0.1.0, 0.1.2, 0.2.0, 0.2.1, 0.3.0, 0.4.0, 0.5.0, 0.5.1, 0.6.0, 0.6.0-rc1, 0.6.0-rc3, 0.6.0-rc4, 0.6.0-rc6, 0.7.0-rc1, 0.7.0-rc2, 0.7.0-rc5
- Fixed versions
- 0.7.0
- CVEs
- CVE-2025-54949
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 18:47 UTC · Revision 1
Source evidence
ExecuTorch heap buffer overflow vulnerability
core-osv · Original sourcePublished 8 Aug 2025, 00:30 UTC
A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be
osv:GHSA-9m39-3mf3-xwch
executorch
Fixed versions: 0.7.0
org.pytorch:executorch-android
Fixed versions: 0.7.0
github.com/pytorch/executorch
Fixed versions: 0.7.0
Complete source record
{
"id": "931c41e82d2c64e9d5590d58cfe2775939d0b3d0a62d835abc86784708d9ea37",
"url": "https://osv.dev/vulnerability/GHSA-9m39-3mf3-xwch",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "ExecuTorch heap buffer overflow vulnerability",
"summary": "A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be",
"evidence": "osv:GHSA-9m39-3mf3-xwch",
"products": [
{
"name": {
"value": "executorch",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.7.0",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "0.1.0",
"evidence": "/affected/0/versions"
},
{
"value": "0.1.2",
"evidence": "/affected/0/versions"
},
{
"value": "0.2.0",
"evidence": "/affected/0/versions"
},
{
"value": "0.2.1",
"evidence": "/affected/0/versions"
},
{
"value": "0.3.0",
"evidence": "/affected/0/versions"
},
{
"value": "0.4.0",
"evidence": "/affected/0/versions"
},
{
"value": "0.5.0",
"evidence": "/affected/0/versions"
},
{
"value": "0.6.0",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "org.pytorch:executorch-android",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.7.0",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "0.5.0",
"evidence": "/affected/1/versions"
},
{
"value": "0.5.1",
"evidence": "/affected/1/versions"
},
{
"value": "0.6.0",
"evidence": "/affected/1/versions"
},
{
"value": "0.6.0-rc1",
"evidence": "/affected/1/versions"
},
{
"value": "0.6.0-rc3",
"evidence": "/affected/1/versions"
},
{
"value": "0.6.0-rc4",
"evidence": "/affected/1/versions"
},
{
"value": "0.6.0-rc6",
"evidence": "/affected/1/versions"
},
{
"value": "0.7.0-rc1",
"evidence": "/affected/1/versions"
},
{
"value": "0.7.0-rc2",
"evidence": "/affected/1/versions"
},
{
"value": "0.7.0-rc5",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "github.com/pytorch/executorch",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.7.0",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "GHSA-9m39-3mf3-xwch",
"aliases": [
"CVE-2025-54949",
"GHSA-9m39-3mf3-xwch",
"PYSEC-2026-333"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.7.0"
}
]
}
],
"package": {
"name": "executorch",
"purl": "pkg:pypi/executorch",
"ecosystem": "PyPI"
},
"versions": [
"0.1.0",
"0.1.2",
"0.2.0",
"0.2.1",
"0.3.0",
"0.4.0",
"0.5.0",
"0.6.0"
],
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/08/GHSA-9m39-3mf3-xwch/GHSA-9m39-3mf3-xwch.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.7.0"
}
]
}
],
"package": {
"name": "org.pytorch:executorch-android",
"purl": "pkg:maven/org.pytorch/executorch-android",
"ecosystem": "Maven"
},
"versions": [
"0.5.0",
"0.5.1",
"0.6.0",
"0.6.0-rc1",
"0.6.0-rc3",
"0.6.0-rc4",
"0.6.0-rc6",
"0.7.0-rc1",
"0.7.0-rc2",
"0.7.0-rc5"
],
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/08/GHSA-9m39-3mf3-xwch/GHSA-9m39-3mf3-xwch.json"
}
},
{
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.7.0"
}
]
}
],
"package": {
"name": "github.com/pytorch/executorch",
"purl": "pkg:swift/github.com/pytorch/executorch",
"ecosystem": "SwiftURL"
},
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/08/GHSA-9m39-3mf3-xwch/GHSA-9m39-3mf3-xwch.json"
}
}
],
"modified": "2026-10-27T16:45:04.555623064Z",
"provider": "osv",
"references": [
"https://nvd.nist.gov/vuln/detail/CVE-2025-54949",
"https://github.com/pytorch/executorch/commit/ede82493dae6d2d43f8c424e7be4721abe5242be",
"https://github.com/pypa/advisory-database/tree/main/vulns/executorch/PYSEC-2026-333.yaml",
"https://github.com/pytorch/executorch",
"https://pypi.org/project/executorch",
"https://www.facebook.com/security/advisories/cve-2025-54949"
],
"provider_metadata": {
"cwe_ids": [
"CWE-122"
],
"severity": "CRITICAL",
"github_reviewed": true,
"nvd_published_at": "2025-08-07T23:15:26Z",
"github_reviewed_at": "2025-08-12T18:49:44Z"
}
},
"related_cves": [
{
"value": "CVE-2025-54949",
"evidence": "/aliases"
}
],
"security_relevant": true,
"severity_evidence": "/database_specific/severity"
},
"source_id": "core-osv",
"document_id": 462885,
"published_at": "2025-08-08T00:30:26+00:00"
}