What is CVE-2025-54950?

CVE-2025-54950 is a critical-severity vulnerability in Meta Platforms, Inc Executorch, classified under Out-of-bounds Read. CVSS score: 9.8/10. Published 2025-08-07.

How severe is CVE-2025-54950?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2025-54950 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Out-of-bounds Read in Meta Platforms, Inc Executorch

CVE-2025-54950

An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit b6b7a16df5e7852d976d8c34c8a7e9a1b6f7d005.

Vulnerability class: Buffer Overflow

EPSS: 0.006 (44.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Meta Platforms, Inc Executorch — versions 0

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

cve-assign@fb.com (x_refsource_CONFIRM)
cve-assign@fb.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2025-54950?: CVE-2025-54950 is a critical-severity vulnerability in Meta Platforms, Inc Executorch, classified under Out-of-bounds Read. CVSS score: 9.8/10. Published 2025-08-07.
How severe is CVE-2025-54950?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2025-54950 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.