Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-54950

Good to know:

icon

Date: August 7, 2025

An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit b6b7a16df5e7852d976d8c34c8a7e9a1b6f7d005.

Severity Score

Related Resources (6)

https://github.com/pytorch/executorch/commit/b6b7a16df5e7852d976d8c34c8a7e9a1b6f7d005
https://github.com/pytorch/executorch/commit/fb03b6f85596a8f954d97929075335255b6a58d4
https://www.facebook.com/security/advisories/cve-2025-54950
https://github.com/pytorch/executorch
https://nvd.nist.gov/vuln/detail/CVE-2025-54950
https://www.mend.io/vulnerability-database/CVE-2025-54950

Severity Score

Weakness Type (CWE)

Out-of-bounds Read

CWE-125

Top Fix

icon

Upgrade Version

Upgrade to version executorch - 0.7.0;https://github.com/pytorch/executorch.git - ciflow/trunk/11996

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us