What is CVE-2025-54951?

CVE-2025-54951 is a critical-severity vulnerability in Meta Platforms, Inc Executorch, classified under Heap-based Buffer Overflow. CVSS score: 9.8/10. Published 2025-08-07.

How severe is CVE-2025-54951?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Meta Platforms, Inc Executorch

CVE-2025-54951

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c.

Vulnerability class: Buffer Overflow

EPSS: 0.007 (48.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Meta Platforms, Inc Executorch — versions 0

Weakness classification (CWE)

CWE-122 — Heap-based Buffer Overflow

References

cve-assign@fb.com (x_refsource_CONFIRM)
cve-assign@fb.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2025-54951?: CVE-2025-54951 is a critical-severity vulnerability in Meta Platforms, Inc Executorch, classified under Heap-based Buffer Overflow. CVSS score: 9.8/10. Published 2025-08-07.
How severe is CVE-2025-54951?: Critical severity. CVSS v3 base score is 9.8 out of 10.