Critical severity9.8OSV Advisory· Published Aug 7, 2025· Updated Apr 15, 2026

CVE-2025-54951

Description

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
executorchPyPI	< 0.7.0	0.7.0
org.pytorch:executorch-androidMaven	< 0.7.0	0.7.0
github.com/pytorch/executorchSwiftURL	< 0.7.0	0.7.0

Affected products

Pytorch/ExecutorchOSV
Range: ciflow/binaries/all/sdym, ciflow/binaries/sdym, stable-2023-08-01, …
ghsa-coords3 versions
pkg:maven/org.pytorch/executorch-android pkg:pypi/executorch pkg:swift/github.com/pytorch/executorch
< 0.7.0+ 2 more
- (no CPE)range: < 0.7.0
- (no CPE)range: < 0.7.0
- (no CPE)range: < 0.7.0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-xc7w-r669-48pfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-54951ghsaADVISORY
github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930cnvdWEB
www.facebook.com/security/advisories/cve-2025-54951nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000