{"action":"Upgrade executorch to 0.7.0 or later.","affected":[{"fixed":"0.7.0","introduced":"0"}],"component":"executorch","cve_ids":["CVE-2025-30402"],"ecosystem":"PyPI","epss":0.00421,"exploited":false,"fixed_versions":["0.7.0"],"ghsa_id":"GHSA-h952-963h-rv99","id":"tcs_01M5KFK9M0MNJECN0TW400WGMH","modified_at":"2026-07-07T17:57:10.238565075Z","published_at":"2025-07-11T18:30:34Z","references":["https://osv.dev/vulnerability/GHSA-h952-963h-rv99","https://nvd.nist.gov/vuln/detail/CVE-2025-30402","https://github.com/pytorch/executorch/commit/93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f","https://github.com/pytorch/executorch","https://www.facebook.com/security/advisories/cve-2025-30402"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-h952-963h-rv99","url":"https://osv.dev/vulnerability/GHSA-h952-963h-rv99"}],"summary":"ExecuTorch vulnerable to Heap-based Buffer Overflow attack"}