CVE-2025-54952

Aug. 8, 2025, 12:15 a.m.

None
No Score

Description

An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 8f062d3f661e20bb19b24b767b9a9a46e8359f2b.

Product(s) Impacted

Vendor Product Versions
Executorch
  • Executorch
  • <8f062d3f661e20bb19b24b767b9a9a46e8359f2b

Weaknesses

Common security weaknesses mapped to this vulnerability.

*CPE(s)

Affected systems and software identified for this CVE.

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
a executorch executorch <8f062d3f661e20bb19b24b767b9a9a46e8359f2b / / / / / / /

Timeline

Published: Aug. 8, 2025, 12:15 a.m.
Last Modified: Aug. 8, 2025, 12:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve-assign@fb.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.