CVE-2025-30405: Meta ExecuTorch integer overflow in model loading

CVE-2025-30405 · Severity: critical · CVSS 9.8 · Published 2025-08-08

ExecuTorch is Meta's runtime library used for deploying AI models on edge devices and mobile platforms. An integer overflow vulnerability in the model loading process can cause memory corruption, allowing an attacker to execute arbitrary code on a device running a vulnerable version. This poses a significant risk to any application using ExecuTorch for machine learning inference.

Technologies: org.pytorch:executorch-android (Maven), executorch (PyPI), github.com/pytorch/executorch (Swift). Vendors: Maven, Meta Platforms, PyPI, Swift.

Quick answers

Is CVE-2025-30405 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-30405 being exploited in the wild.
How severe is CVE-2025-30405?
Critical severity, with a CVSS score of 9.8, published 8 August 2025.
Which products and versions are affected?
org.pytorch:executorch-android (Maven) < 0.7.0, ECOSYSTEM:introduced=0,fixed=0.7.0; Meta Platforms ExecuTorch Android < 0.7.0; executorch (PyPI) < 0.7.0, ECOSYSTEM:introduced=0,fixed=0.7.0; github.com/pytorch/executorch (Swift) < 0.7.0.
Is there a fix for CVE-2025-30405?
Yes. org.pytorch:executorch-android (Maven): upgrade to 0.7.0 or later; executorch (PyPI): upgrade to 0.7.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-30405 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2025-30405?
Check whether you run org.pytorch:executorch-android (Maven), Meta Platforms ExecuTorch Android, executorch (PyPI) or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • org.pytorch:executorch-android (Maven): upgrade to 0.7.0 or later
    # set org.pytorch:executorch-android to 0.7.0 in your pom.xml or build.gradle
  • executorch (PyPI): upgrade to 0.7.0 or later
    pip install "executorch>=0.7.0"

Technical details

The vulnerability is an integer overflow (CWE-190) located in the HierarchicalAllocator::get_offset_address() function within ExecuTorch's memory management subsystem. When parsing specially crafted model files, integer arithmetic used to calculate memory offsets wraps around, causing objects to be written outside their allocated buffers. The attack vector is network-based with no authentication or user interaction required—an attacker can craft a malicious ExecuTorch model file and deliver it to a vulnerable target. Successful exploitation enables arbitrary code execution with full system privileges. The vulnerability was patched in commit 0830af8207240df8d7f35b984cdf8bc35d74fa73, released as version 0.7.0 across pip, Maven, and Swift package distributions.

Affected products

  • Meta Platforms ExecuTorch < 0.7.0
  • Meta Platforms ExecuTorch Android < 0.7.0

Identifiers

  • CVE-2025-30405
  • GHSA-84m3-f99p-cqx5
  • PYSEC-2026-332

Timeline

  • 2025-08-07: disclosed: Published by NVD
  • 2025-08-08: advisory: Published to GitHub Advisory Database
  • 2025-08-08: patched: Fixed in version 0.7.0 and commit 0830af8207240df8d7f35b984cdf8bc35d74fa73

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.