---
id: "CVE-2025-54950"
kind: "vulnerability"
aliases: ["CVE-2025-54950", "GHSA-f9hx-c6jf-3qxm"]
title: "ExecuTorch out-of-bounds access vulnerability"
severity: "critical"
cvss: 9.8
epss: 0.00619
exploited: false
status: "open"
category: "package"
products: [{"name": "executorch", "fixed": ["0.7.0"], "affected": "< 0.7.0", "ecosystem": "pypi"}, {"name": "org.pytorch:executorch-android", "fixed": ["0.7.0"], "affected": "< 0.7.0", "ecosystem": "maven"}, {"name": "github.com/pytorch/executorch", "fixed": ["0.7.0"], "affected": "< 0.7.0", "ecosystem": "swift"}]
ecosystems: ["maven", "pypi", "swift"]
tags: ["android", "cwe-125", "on-device-ai", "package", "python", "pytorch", "swift"]
not_affected_if: ["trusted-models-only"]
published_at: "2025-08-07T23:15:26+00:00"
first_seen_at: "2026-10-27T16:41:05+00:00"
updated_at: "2026-10-27T17:03:04+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-f9hx-c6jf-3qxm", "first_seen_at": "2026-10-27T16:41:05+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-54950", "first_seen_at": "2026-10-27T17:03:04+00:00"}]
---

# ExecuTorch out-of-bounds access vulnerability

ExecuTorch, PyTorch's on-device inference runtime, reads memory outside a buffer while loading a model file. A crafted model can crash the runtime and may allow code execution or other undesired effects.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:executorch affected < 0.7.0 fixed 0.7.0
- maven:org.pytorch:executorch-android affected < 0.7.0 fixed 0.7.0
- swift:github.com/pytorch/executorch affected < 0.7.0 fixed 0.7.0

## How to check

- `pip show executorch` and confirm the version is below `0.7.0`
- Check Maven dependency `org.pytorch:executorch-android` and Swift package `github.com/pytorch/executorch` for versions below `0.7.0`

## Fix

- Upgrade `executorch` (PyPI) to `0.7.0` or later
- Upgrade `org.pytorch:executorch-android` (Maven) to `0.7.0` or later
- Upgrade `github.com/pytorch/executorch` (Swift) to `0.7.0` or later
- Only load models from trusted sources until upgraded

## Timeline

- 2026-10-27T16:41:05+00:00 ghsa https://github.com/advisories/GHSA-f9hx-c6jf-3qxm
- 2026-10-27T17:03:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-54950

## From the sources

An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit fb03b6f85596a8f954d97929075335255b6a58d4.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_