9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-54950

CVE-2025-54950: ExecuTorch out-of-bounds access vulnerability

An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit fb03b6f85596a8f954d97929075335255b6a58d4.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-54950

CVE-2025-54950:

9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
executorch	pip	< 0.7.0	0.7.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is an out-of-bounds read in ExecuTorch caused by kernel functions not validating the number of arguments they receive on the execution stack. An attacker can craft a malicious ExecuTorch model that invokes these kernels with fewer arguments than they expect. When the kernel attempts to access the missing arguments from the stack, it reads out of bounds, leading to a process crash and potential for arbitrary code execution.

The analysis of the provided commits confirms this root cause. The patches consistently add checks at the beginning of kernel functions to validate the size of the stack argument before it is accessed. These changes were applied in two main areas:

Manually-written Primitive Kernels: Functions like et_copy_index, et_view, and numerous operators registered in register_prim_ops.cpp were patched to include ET_KERNEL_CHECK_MSG. This macro verifies the stack size against the expected number of arguments.
Generated Kernels: The Python-based code generator (codegen/gen.py) was updated to inject a similar stack size check into the C++ code it produces. This indicates that any custom kernel created using this tool was previously vulnerable.
Test code: The test code was also updated to include tests for the new checks.

The identified vulnerable functions are the C++ kernels that process the model's operations at runtime. During exploitation, a profiler would show these function names in the stack trace at the time of the crash.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.