Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f

CVE-2025-30402 is a heap-based buffer overflow vulnerability identified in the ExecuTorch component developed by Meta Platforms, Inc. ExecuTorch appears to be a runtime or execution environment that loads and runs methods, likely related to machine learning or AI workloads given the name similarity to PyTorch. The vulnerability arises during the loading of ExecuTorch methods, where improper handling of heap memory leads to a buffer overflow condition. This flaw can cause the runtime to crash, resulting in denial of service, but more critically, it may allow an attacker to execute arbitrary code or trigger other unintended behaviors. The vulnerability is classified under CWE-122, which involves writing outside the bounds of allocated heap buffers, a common and dangerous memory corruption issue. The affected versions are those prior to a specific commit (93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f), indicating that a patch or fix has been committed but not necessarily widely deployed yet. No CVSS score has been assigned, and there are no known exploits in the wild at this time. The vulnerability was reserved in March 2025 and published in July 2025, indicating recent discovery and disclosure. The lack of a patch link suggests that users should monitor Meta’s official channels for updates or apply the fix from the referenced commit if possible. Given the nature of heap buffer overflows, exploitation could be complex but feasible, especially if attackers can supply malicious method payloads to the ExecuTorch runtime. This vulnerability could be leveraged in environments where ExecuTorch is used to process untrusted inputs or where attackers have some level of access to submit code or data to the runtime.

Detailed information about CVE-2025-30402: Heap-based Buffer Overflow (CWE-122) in Meta Platforms, Inc ExecuTorch affecting Meta Platforms, Inc ExecuTorch. Get 

CVE-2025-30402: Heap-based Buffer Overflow (CWE-122) in Meta Platforms, Inc ExecuTorch - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-30402: Heap-based Buffer Overflow (CWE-122) in Meta Platforms, Inc ExecuTorch

Threats Tagged 'cve-2025-30402'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-30402'

Lead Pen Test Professional