Skip to content

Meta (Facebook) · product

ExecuTorch

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable…CVE-2025-54951Meta Platforms, Inc · CVSS 9.8 · 0.7% likely

    CWE-122

  2. A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior…CVE-2025-54949Meta Platforms, Inc · CVSS 9.8 · 0.7% likely

    CWE-122

  3. An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. Thi…CVE-2025-54950Meta Platforms, Inc · CVSS 9.8 · 0.7% likely

    CWE-125

  4. An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution o…CVE-2025-30405Meta Platforms, Inc · CVSS 9.8 · 0.7% likely

    CWE-190

  5. An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This…CVE-2025-30404Meta Platforms, Inc · CVSS 9.8 · 0.7% likely

    CWE-190

  6. An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in code execution or ot…CVE-2025-54952Meta Platforms, Inc · CVSS 9.8 · 0.7% likely

    CWE-680

  7. A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. Thi…CVE-2025-30402Meta Platforms, Inc · CVSS 8.1 · 0.4% likely

    CWE-122

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.