CVE-2025-54951: ExecuTorch heap-based buffer overflow in model loading

CVE-2025-54951 · Severity: critical · CVSS 9.8 · Published 2025-08-08

ExecuTorch is a runtime framework used to execute machine learning models on edge devices and servers. A heap buffer overflow vulnerability in the model loading mechanism can cause crashes and potentially allow remote attackers to execute arbitrary code without authentication or user interaction. This poses a significant risk to applications that load untrusted or attacker-controlled models.

Technologies: org.pytorch:executorch-android (Maven), executorch (PyPI), github.com/pytorch/executorch (Swift). Vendors: Maven, PyPI, Swift.

Quick answers

Is CVE-2025-54951 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-54951 being exploited in the wild.
How severe is CVE-2025-54951?
Critical severity, with a CVSS score of 9.8, published 8 August 2025.
Which products and versions are affected?
org.pytorch:executorch-android (Maven) < 0.7.0, ECOSYSTEM:introduced=0,fixed=0.7.0; executorch (PyPI) < 0.7.0, ECOSYSTEM:introduced=0,fixed=0.7.0; github.com/pytorch/executorch (Swift) < 0.7.0.
Is there a fix for CVE-2025-54951?
Yes. org.pytorch:executorch-android (Maven): upgrade to 0.7.0 or later; executorch (PyPI): upgrade to 0.7.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-54951 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2025-54951?
Check whether you run org.pytorch:executorch-android (Maven), executorch (PyPI) or github.com/pytorch/executorch (Swift) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • org.pytorch:executorch-android (Maven): upgrade to 0.7.0 or later
    # set org.pytorch:executorch-android to 0.7.0 in your pom.xml or build.gradle
  • executorch (PyPI): upgrade to 0.7.0 or later
    pip install "executorch>=0.7.0"

Technical details

ExecuTorch contains heap-based buffer overflow vulnerabilities (CWE-122) in the model loading and tensor parsing components, specifically related to validation of tensor dimension limits. The vulnerability is triggered when malformed or oversized model files are loaded, allowing an attacker to overflow heap-allocated buffers without requiring authentication or user interaction. The attack vector is network-based with low complexity, as an attacker can craft a malicious model file and cause a remote ExecuTorch instance to load it. Successful exploitation can result in denial of service (runtime crash) or arbitrary code execution. The issue was fixed in commit cea9b23aa8ff78aff92829a466da97461cc7930c by validating the kTensorDimensionLimit during model parsing, and patches are available in version 0.7.0 across pip, Maven, and Swift package ecosystems.

Affected products

  • Meta Platforms ExecuTorch < 0.7.0
  • PyTorch executorch (pip) < 0.7.0
  • PyTorch executorch-android (Maven) < 0.7.0
  • PyTorch executorch (Swift) < 0.7.0

Identifiers

  • CVE-2025-54951
  • GHSA-xc7w-r669-48pf
  • PYSEC-2026-336

Timeline

  • 2025-08-07: disclosed: CVE published by NVD
  • 2025-08-08: disclosed: GHSA advisory published
  • 2025-08-07: patched: Fix committed to repository (cea9b23aa8ff78aff92829a466da97461cc7930c) with version 0.7.0 release

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.