CVE-2025-54951

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-54951", "assignerOrgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827", "state": "PUBLISHED", "assignerShortName": "facebook", "dateReserved": "2025-08-01T18:00:45.375Z", "datePublished": "2025-08-07T23:06:02.059Z", "dateUpdated": "2025-08-12T14:20:40.207Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "ExecuTorch", "vendor": "Meta Platforms, Inc", "versions": [{"lessThan": "https://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930c", "status": "affected", "version": "0", "versionType": "git"}]}], "dateAssigned": "2025-08-01T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c."}], "problemTypes": [{"descriptions": [{"description": "Heap-based Buffer Overflow (CWE-122)", "lang": "en"}]}], "providerMetadata": {"orgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827", "shortName": "facebook", "dateUpdated": "2025-08-07T23:06:02.059Z"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.facebook.com/security/advisories/cve-2025-54951"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930c"}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-122", "lang": "en", "description": "CWE-122 Heap-based Buffer Overflow"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-08-12T14:20:19.866300Z", "id": "CVE-2025-54951", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-12T14:20:40.207Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-54951", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-08-12T14:20:19.866300Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "CWE-122 Heap-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-12T14:20:35.647Z"}}], "cna": {"affected": [{"vendor": "Meta Platforms, Inc", "product": "ExecuTorch", "versions": [{"status": "affected", "version": "0", "lessThan": "https://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930c", "versionType": "git"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.facebook.com/security/advisories/cve-2025-54951", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930c", "tags": ["x_refsource_CONFIRM"]}], "dateAssigned": "2025-08-01T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Heap-based Buffer Overflow (CWE-122)"}]}], "providerMetadata": {"orgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827", "shortName": "facebook", "dateUpdated": "2025-08-07T23:06:02.059Z"}}}, "cveMetadata": {"cveId": "CVE-2025-54951", "state": "PUBLISHED", "dateUpdated": "2025-08-12T14:20:40.207Z", "dateReserved": "2025-08-01T18:00:45.375Z", "assignerOrgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827", "datePublished": "2025-08-07T23:06:02.059Z", "assignerShortName": "facebook"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "ExecuTorch", "vendor": "Meta Platforms, Inc", "versions": [{"lessThan": "https://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930c", "status": "affected", "version": "0", "versionType": "git"}]}], "source": "cve-assign@fb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c."}, {"lang": "es", "value": "Un grupo de vulnerabilidades relacionadas con el desbordamiento de b\u00fafer en la carga de modelos de ExecuTorch puede provocar un bloqueo del entorno de ejecuci\u00f3n y, potencialmente, la ejecuci\u00f3n de c\u00f3digo u otros efectos no deseados. Este problema afecta a ExecuTorch antes del commit cea9b23aa8ff78aff92829a466da97461cc7930c."}], "id": "CVE-2025-54951", "lastModified": "2026-06-17T09:40:59.133", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-54951", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-08-12T14:20:19.866300Z", "version": "2.0.3"}}]}, "published": "2025-08-07T23:15:26.713", "references": [{"source": "cve-assign@fb.com", "url": "https://github.com/pytorch/executorch/commit/cea9b23aa8ff78aff92829a466da97461cc7930c"}, {"source": "cve-assign@fb.com", "url": "https://www.facebook.com/security/advisories/cve-2025-54951"}], "sourceIdentifier": "cve-assign@fb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-122"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"created": "2025-08-12T07:49:19.974659+00:00", "updated": "2025-08-12T07:49:19.974710+00:00", "vendors": ["meta", "meta$PRODUCT$executorch"]}