PyPI/executorch CVE-2025-54952: medium, EPSS 0.61%

ExecuTorch integer overflow vulnerability leads to code execution

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-33r8-vrx9-rmcv
• https://nvd.nist.gov/vuln/detail/CVE-2025-54952
• https://github.com/pytorch/executorch/commit/8f062d3f661e20bb19b24b767b9a9a46e8359f2b
• https://github.com/pytorch/executorch
• https://www.facebook.com/security/advisories/cve-2025-54952

CVE-2025-54952 · published 2025-08-08T00:30:26Z · modified 2026-07-07T17:57:03.110142945Z · JSON