⚡ Weekly Recap: NFC Fraud, Curly COMrades, N
60
CVE-2025-54949
- CVSS 3.1
- 9.8 critical
- EPSS
- <1%p50
- Published
- ·
- Modified
Description · NVD
A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be
- Ecosystems
- pip, maven, swift
- Weakness
- CWE-122
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- GHSA
- GHSA-9m39-3mf3-xwch (critical)