ExecuTorch Integer Overflow Vulnerability Leading to Overlapping Allocations and Potential Code Execution

An integer overflow vulnerability has been identified in ExecuTorch, prior to commit d158236b1dc84539c1b16843bc74054c9dcba006. This vulnerability arises during the loading of ExecuTorch models, where improper handling of memory allocations can lead to overlapping allocations. Such overlaps may cause unintended consequences, including the possibility of code execution.

Impact

Exploitation of this vulnerability could result in overlapping memory allocations, potentially leading to code execution or other undesirable effects.