GHSA-GHQ9-VC6F-8QJF TorchGeo Remote Code Execution Vulnerability

Impact TorchGeo 0.4–0.6.0 used an eval statement in its model weight API that could allow an unauthenticated, remote attacker to execute arbitrary commands. All platforms that expose torchgeo.models.getweight or torchgeo.trainers as an external API could be affected. Patches The eval statement wa...

TorchGeo Remote Code Execution Vulnerability

Impact TorchGeo 0.4–0.6.0 used an eval statement in its model weight API that could allow an unauthenticated, remote attacker to execute arbitrary commands. All platforms that expose torchgeo.models.getweight or torchgeo.trainers as an external API could be affected. Patches The eval statement wa...

EUVD-2024-0217

TorchGeo Remote Code Execution Vulnerability...

TorchGeo Remote Code Execution Vulnerability

Impact TorchGeo 0.4–0.6.0 used an ""eval"" https://docs.python.org/3/library/functions.htmleval statement in its model weight API that could allow an unauthenticated, remote attacker to execute arbitrary commands. All platforms that expose ""torchgeo.models.getweight""...

torchgeo Python Library < 0.6.1 RCE

The version of the torchgeo Python library installed on the remote host is prior to 0.6.1. It is, therefore, affected by a remote code execution vulnerability. The usage of 'eval' in torchgeo's 'getweight' API function could allow an unauthenticated, remote attacker to execute arbitrary commands...

The vulnerability of the Microsoft TorchGeo library for working with geospatial data, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft TorchGeo library for working with geospatial data is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...

Arbitrary Code Injection

Overview torchgeo is a TorchGeo: datasets, samplers, transforms, and pre-trained models for geospatial data Affected versions of this package are vulnerable to Arbitrary Code Injection via the handling of specific data inputs. An attacker can execute arbitrary code on the system. Remediation...

Duplicate Advisory: TorchGeo Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ghq9-vc6f-8qjf. This link is maintained to preserve external references. Original Description TorchGeo Remote Code Execution Vulnerability...

GHSA-G5VP-J278-8PJH Duplicate Advisory: TorchGeo Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ghq9-vc6f-8qjf. This link is maintained to preserve external references. Original Description TorchGeo Remote Code Execution Vulnerability...

CVE-2024-49048

TorchGeo Remote Code Execution Vulnerability...

CVE-2024-49048

TorchGeo Remote Code Execution Vulnerability...

PYSEC-2024-204

TorchGeo Remote Code Execution Vulnerability...

PYSEC-2024-204

TorchGeo Remote Code Execution Vulnerability...

CVE-2024-49048 TorchGeo Remote Code Execution Vulnerability

...

CVE-2024-49048

CVE-2024-49048 affects the TorchGeo Python library: versions prior to 0.6.1 are vulnerable to remote code execution because the get_weight() API uses eval(), enabling an unauthenticated remote attacker to run arbitrary commands. The Nessus entry corroborates this RCE claim for

CVE-2024-49048 TorchGeo Remote Code Execution Vulnerability

...

TorchGeo Remote Code Execution Vulnerability

...

Microsoft TorchGeo 代码注入漏洞

Microsoft TorchGeo is a PyTorch domain library from Microsoft Corporation USA that provides datasets, samplers, transformations, and pre-trained models specific to geospatial data. Microsoft TorchGeo suffers from a code injection vulnerability. An attacker exploiting this vulnerability could...

PT-2024-8093

Name of the Vulnerable Software and Affected Versions: TorchGeo affected versions not specified Description: The issue is related to incorrect code generation management in the TorchGeo library, which handles geospatial data. This can allow a remote attacker to execute arbitrary code...

KLA77111 ACE vulnerabilities in Microsoft Open Source Software

Remote code execution vulnerabilities were found in Microsoft Open Source Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in TorchGeo can be exploited remotely to execute...