ExecuTorch integer overflow vulnerability
An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9dcba006.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-30404US | — | — | ||
An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/advisories/GHSA-hj95-mhgf-jxc4ADVISORY
- https://github.com/pytorch/executorchPACKAGE
- https://github.com/pytorch/executorch/commit/d158236b1dc84539c1b16843bc74054c9dcba006WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-30404ADVISORY
- https://pypi.org/project/executorchPACKAGE
- https://www.facebook.com/security/advisories/cve-2025-30404WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan