Description
A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Meta Platforms | ExecuTorch | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.pytorch:executorch-android | < 0.7.0 | 0.7.0 | GHSA-9m39-3mf3-xwch |
| PyPI | executorch | < 0.7.0 | 0.7.0 | PYSEC-2026-333 |
| SwiftURL | github.com/pytorch/executorch | < 0.7.0 | 0.7.0 | GHSA-9m39-3mf3-xwch |