Critical severity9.8OSV Advisory· Published Aug 8, 2025· Updated Apr 15, 2026

CVE-2025-54952

Description

An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 8f062d3f661e20bb19b24b767b9a9a46e8359f2b.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
executorchPyPI	<= 0.6.0	—

Affected products

Pytorch/ExecutorchOSV
Range: ciflow/binaries/all/sdym, ciflow/binaries/sdym, stable-2023-08-01, …
ghsa-coords
pkg:pypi/executorch
Range: <= 0.6.0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-33r8-vrx9-rmcvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-54952ghsaADVISORY
github.com/pytorch/executorch/commit/8f062d3f661e20bb19b24b767b9a9a46e8359f2bnvdWEB
www.facebook.com/security/advisories/cve-2025-54952nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000