{"action":"Upgrade executorch to 0.7.0 or later.","affected":[{"fixed":"0.7.0","introduced":"0"}],"component":"executorch","cve_ids":["CVE-2025-30402"],"ecosystem":"PyPI","epss":0.00421,"exploited":false,"fixed_versions":["0.7.0"],"ghsa_id":"GHSA-h952-963h-rv99","id":"tcs_01M5KGS32VC9G939J4F4NFW9CS","modified_at":"2026-07-07T17:46:29.838158695Z","published_at":"2026-07-07T16:02:57.638754Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1352","https://nvd.nist.gov/vuln/detail/CVE-2025-30402","https://github.com/pytorch/executorch/commit/93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f","https://github.com/pytorch/executorch","https://www.facebook.com/security/advisories/cve-2025-30402","https://pypi.org/project/executorch","https://github.com/advisories/GHSA-h952-963h-rv99"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-1352","url":"https://osv.dev/vulnerability/PYSEC-2026-1352"}],"summary":"ExecuTorch vulnerable to Heap-based Buffer Overflow attack"}