High severity8.1OSV Advisory· Published Jul 11, 2025· Updated Apr 15, 2026

CVE-2025-30402

Description

A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
executorchPyPI	< 0.7.0	0.7.0
org.pytorch:executorch-androidMaven	< 0.7.0-rc1	0.7.0-rc1
github.com/pytorch/executorchSwiftURL	< 0.7.0-rc1	0.7.0-rc1

Affected products

Pytorch/ExecutorchOSV
Range: ciflow/binaries/all/sdym, ciflow/binaries/sdym, stable-2023-08-01, …
ghsa-coords3 versions
pkg:maven/org.pytorch/executorch-android pkg:pypi/executorch pkg:swift/github.com/pytorch/executorch
< 0.7.0-rc1+ 2 more
- (no CPE)range: < 0.7.0-rc1
- (no CPE)range: < 0.7.0
- (no CPE)range: < 0.7.0-rc1

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-h952-963h-rv99ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-30402ghsaADVISORY
github.com/pytorch/executorch/commit/93b1a0c15f7eda49b2bc46b5b4c49557b4e9810fnvdWEB
www.facebook.com/security/advisories/cve-2025-30402nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000