ExecuTorch Integer Overflow Vulnerability Leading to Potential Code Execution

A vulnerability allowing integer overflow in the handling of ExecuTorch models has been identified. This overflow can cause objects to be placed outside their designated memory allocation, potentially leading to code execution or other negative effects. The issue affects ExecuTorch versions prior to commit 0830af8207240df8d7f35b984cdf8bc35d74fa73.

Impact

Exploitation of this vulnerability could result in arbitrary code execution.

Remediation

Users can update to the version of ExecuTorch that includes the patch for this vulnerability, which is available in the official GitHub repository.