9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-54951

CVE-2025-54951: ExecuTorch vulnerable to Heap-based Buffer Overflow

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-54951

CVE-2025-54951:

9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
executorch	pip	< 0.7.0	0.7.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a heap-based buffer overflow in ExecuTorch's model loading process, as described in CVE-2025-54951. The root cause is the lack of validation on the rank (number of dimensions) of tensors within a model file. The provided commit cea9b23aa8ff78aff92829a466da97461cc7930c directly addresses this issue by introducing a check for the tensor dimension limit.

The analysis of the patch reveals that two functions, both named parseTensor but in different files (tensor_parser_aten.cpp and tensor_parser_portable.cpp), were modified to include this crucial validation. These functions are responsible for parsing tensor data from the model file. By not checking the number of dimensions, an attacker could craft a malicious model file with a tensor that has an extremely large rank. When parseTensor attempts to process this tensor, it would lead to a buffer overflow, potentially causing a denial of service or enabling arbitrary code execution.

The identified vulnerable functions, executorch::runtime::parseTensor, are the exact locations where the vulnerability existed and where the fix was applied. During exploitation, these functions would be on the call stack as they process the malicious tensor data, making them key indicators for runtime profiling and security monitoring.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.