Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2025-30405

CVSS 3.1
9.8 critical
EPSS
<1%p47
Published
·
Modified
Analyze CVE-2025-30405 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 0830af8207240df8d7f35b984cdf8bc35d74fa73.

Ecosystems
pip, maven, swift
Weakness
CWE-190
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA
GHSA-84m3-f99p-cqx5 (critical)
NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

1 story