CVE-2025-54950Critical· 9.8▾ MidnightExecuTorch out-of-bounds access vulnerability
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.6%
0.6% → 0.6%
An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit fb03b6f85596a8f954d97929075335255b6a58d4.
executorch < 0.7.0org.pytorch:executorch-android < 0.7.0github.com/pytorch/executorch < 0.7.0Upgrade to a patched release:
executorch 0.7.0org.pytorch:executorch-android 0.7.0github.com/pytorch/executorch 0.7.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-54951Critical· 9.8ExecuTorch vulnerable to Heap-based Buffer Overflow
CVE-2025-54949Critical· 9.8ExecuTorch heap buffer overflow vulnerability
CVE-2025-30405Critical· 9.8ExecuTorch integer overflow vulnerability
CVE-2025-30404Critical· 9.8ExecuTorch integer overflow vulnerability
CVE-2025-30402High· 8.1ExecuTorch vulnerable to Heap-based Buffer Overflow attack
CVE-2025-54952MediumExecuTorch integer overflow vulnerability leads to code execution