Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be

CVE-2025-54949 is a critical heap-based buffer overflow vulnerability (CWE-122) found in Meta Platforms, Inc's ExecuTorch product. ExecuTorch is a framework or tool related to loading and executing machine learning models. The vulnerability arises during the loading process of ExecuTorch models, where improper handling of heap memory leads to a buffer overflow condition. This flaw can be exploited remotely without any authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). Successful exploitation allows an attacker to execute arbitrary code with the privileges of the ExecuTorch process, potentially leading to full system compromise. The vulnerability affects all versions prior to the commit ede82493dae6d2d43f8c424e7be4721abe5242be, with no patch links currently provided. The CVSS v3.1 base score is 9.8, reflecting its critical severity due to high impact on confidentiality, integrity, and availability, combined with ease of exploitation. Although no known exploits are reported in the wild yet, the nature of the vulnerability and the widespread use of Meta's AI tools suggest a high risk of future exploitation. The vulnerability is particularly dangerous because it can be triggered remotely without any prerequisites, making it a prime target for attackers aiming to compromise AI infrastructure or systems running ExecuTorch models.

Detailed information about CVE-2025-54949: Heap-based Buffer Overflow (CWE-122) in Meta Platforms, Inc ExecuTorch affecting Meta Platforms, Inc ExecuTorch. Get 

CVE-2025-54949: Heap-based Buffer Overflow (CWE-122) in Meta Platforms, Inc ExecuTorch - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-54949: Heap-based Buffer Overflow (CWE-122) in Meta Platforms, Inc ExecuTorch

Threats Tagged 'cve-2025-54949'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-54949'

Lead Pen Test Professional