CVE-2025-30404: 
Java vulnerability analysis and mitigation

An integer overflow vulnerability (CVE-2025-30404) was discovered in ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9dcba006. The vulnerability exists in the loading of ExecuTorch models which can cause overlapping allocations, potentially resulting in code execution or other undesirable effects (NVD).

The vulnerability is classified as an Integer Overflow or Wraparound (CWE-190) issue. The flaw occurs in the memory allocation process where the end allocation could exceed the allocator's bounds or become less than the start position due to integer overflow. The vulnerability has received a CVSS v3.1 base score of 9.8 CRITICAL (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) (NVD).

If exploited, this vulnerability could lead to code execution and other undesirable effects. The high CVSS score of 9.8 indicates critical severity with potential for complete compromise of system confidentiality, integrity, and availability (NVD).

The vulnerability has been fixed in commit d158236b1dc84539c1b16843bc74054c9dcba006. The fix involves adding an additional check to ensure that the end allocation position is not less than the start position, preventing the integer overflow condition (GitHub Commit).