CVE-2025-30404: PyTorch ExecuTorch integer overflow in model loading

CVE-2025-30404 · Severity: critical · CVSS 9.8 · Published 2025-08-08

ExecuTorch is Meta's framework for running machine learning models on edge devices and servers. An integer overflow bug in the model loading process can cause the memory allocator to create overlapping memory regions, allowing an attacker to corrupt memory and potentially execute arbitrary code. This affects any application loading untrusted ExecuTorch models over the network.

Technologies: org.pytorch:executorch-android (Maven), executorch (PyPI), github.com/pytorch/executorch (Swift). Vendors: Maven, PyPI, Swift.

Quick answers

Is CVE-2025-30404 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-30404 being exploited in the wild.
How severe is CVE-2025-30404?
Critical severity, with a CVSS score of 9.8, published 8 August 2025.
Which products and versions are affected?
org.pytorch:executorch-android (Maven) < 0.7.0, ECOSYSTEM:introduced=0,fixed=0.7.0; executorch (PyPI) < 0.7.0, ECOSYSTEM:introduced=0,fixed=0.7.0; github.com/pytorch/executorch (Swift) < 0.7.0.
Is there a fix for CVE-2025-30404?
Yes. org.pytorch:executorch-android (Maven): upgrade to 0.7.0 or later; executorch (PyPI): upgrade to 0.7.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-30404 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2025-30404?
Check whether you run org.pytorch:executorch-android (Maven), executorch (PyPI) or github.com/pytorch/executorch (Swift) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • org.pytorch:executorch-android (Maven): upgrade to 0.7.0 or later
    # set org.pytorch:executorch-android to 0.7.0 in your pom.xml or build.gradle
  • executorch (PyPI): upgrade to 0.7.0 or later
    pip install "executorch>=0.7.0"

Technical details

The vulnerability is a CWE-190 integer overflow in ExecuTorch's memory allocator. When loading a model, the allocate() function fails to properly validate size calculations, allowing an attacker to craft a malicious model file that triggers an integer overflow. This results in overlapping memory allocations, leading to heap corruption. The attack vector is network-based with no privileges or user interaction required. An attacker can send a crafted ExecuTorch model file to trigger the overflow, achieving arbitrary code execution, data corruption, or denial of service. The vulnerability is fixed in commit d158236b1dc84539c1b16843bc74054c9dcba006 (version 0.7.0 and later) by adding proper overflow checks in the memory_allocator.h allocate() function.

Affected products

  • Meta Platforms, Inc. ExecuTorch < 0.7.0
  • PyTorch executorch < 0.7.0
  • PyTorch executorch-android < 0.7.0

Identifiers

  • CVE-2025-30404
  • GHSA-hj95-mhgf-jxc4
  • PYSEC-2026-335

Timeline

  • 2025-08-07: disclosed: Published to NVD
  • 2025-08-08: advisory: Published to GitHub Advisory Database
  • 2025-08-07: patched: Fix available in commit d158236b1dc84539c1b16843bc74054c9dcba006 and version 0.7.0

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.