{"id":64035,"date":"2025-08-13T22:11:04","date_gmt":"2025-08-13T22:11:04","guid":{"rendered":""},"modified":"2025-09-14T13:23:54","modified_gmt":"2025-09-14T19:23:54","slug":"cve-2025-54949-heap-buffer-overflow-vulnerability-in-executorch-models","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-54949-heap-buffer-overflow-vulnerability-in-executorch-models\/","title":{"rendered":"CVE-2025-54949: Heap Buffer Overflow Vulnerability in ExecuTorch Models<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

Today, we will be exploring a significant vulnerability, CVE-2025-54949, that affects the ExecuTorch models prior to the commit ede82493dae6d2d43f8c424e7be4721abe5242be. This vulnerability is particularly alarming due to the potential it has for code execution or triggering other undesirable effects. It is highly prevalent in older versions of the software, making a substantial number of systems susceptible to potential compromise and data<\/a> leakage.
\nGiven the severity of the CVSS score of 9.8, this vulnerability is a critical<\/a> concern that requires immediate attention. The potential for system<\/a> compromise and data leakage highlights the seriousness of this issue, making it crucial for all users to update their systems or implement mitigation measures.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-54949
\nSeverity: Critical (9.8 CVSS)
\nAttack Vector: Local
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n