CVE-2025-30404Critical· 9.8▾ MidnightExecuTorch integer overflow vulnerability
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.6%
0.6% → 0.6%
An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9dcba006.
executorch < 0.7.0org.pytorch:executorch-android < 0.7.0github.com/pytorch/executorch < 0.7.0Upgrade to a patched release:
executorch 0.7.0org.pytorch:executorch-android 0.7.0github.com/pytorch/executorch 0.7.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-30405Critical· 9.8ExecuTorch integer overflow vulnerability
CVE-2025-54951Critical· 9.8ExecuTorch vulnerable to Heap-based Buffer Overflow
CVE-2025-54949Critical· 9.8ExecuTorch heap buffer overflow vulnerability
CVE-2025-54950Critical· 9.8ExecuTorch out-of-bounds access vulnerability
CVE-2025-30402High· 8.1ExecuTorch vulnerable to Heap-based Buffer Overflow attack
CVE-2025-54952MediumExecuTorch integer overflow vulnerability leads to code execution