CRITICAL🇵🇱 Wersja polska

CVE-2022-42885

CVSS 9.8v3.1pub. 2023-07-21upd. 2024-11-21

A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Openbabel Open Babel

    APP
    Openbabel
    3.1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2022-46280CRITICAL9.8ten sam produkt

A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1....

CVE-2022-43467CRITICAL9.8ten sam produkt

An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and...

CVE-2022-41793CRITICAL9.8ten sam produkt

An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and mast...

CVE-2022-44451CRITICAL9.8ten sam produkt

A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 a...

CVE-2022-46289CRITICAL9.8ten sam produkt

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1...