{"action":"Upgrade org.pytorch:executorch-android to 0.7.0-rc1 or later.","affected":[{"fixed":"0.7.0-rc1","introduced":"0"}],"component":"org.pytorch:executorch-android","cve_ids":["CVE-2025-30402"],"ecosystem":"Maven","epss":0.00421,"exploited":false,"fixed_versions":["0.7.0-rc1"],"ghsa_id":"GHSA-h952-963h-rv99","id":"tcs_01M5N9069C73MY8AAGPP9A1AJ6","modified_at":"2026-07-07T17:57:10.238565075Z","published_at":"2025-07-11T18:30:34Z","references":["https://osv.dev/vulnerability/GHSA-h952-963h-rv99","https://nvd.nist.gov/vuln/detail/CVE-2025-30402","https://github.com/pytorch/executorch/commit/93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f","https://github.com/pytorch/executorch","https://www.facebook.com/security/advisories/cve-2025-30402"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-h952-963h-rv99#Maven/org.pytorch:executorch-android","url":"https://osv.dev/vulnerability/GHSA-h952-963h-rv99"}],"summary":"ExecuTorch vulnerable to Heap-based Buffer Overflow attack"}