CRITICAL🇵🇱 Wersja polska

CVE-2022-46280

CVSS 9.8v3.1pub. 2023-07-21upd. 2024-11-21

A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Openbabel Open Babel

    APP
    Openbabel
    3.1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2022-44451CRITICAL9.8PL ✓same product

Open Babel: niezainicjowany wskaźnik w formacie MSI umożliwia RCE

CVE-2022-42885CRITICAL9.8PL ✓same product

RCE w Open Babel — niezainicjowany wskaźnik w parserze formatu GRO

CVE-2022-43467CRITICAL9.8PL ✓same product

Out-of-bounds write w Open Babel — RCE przez plik PQS

CVE-2022-41793CRITICAL9.8PL ✓same product

Out-of-bounds write w Open Babel — RCE przez złośliwy plik CSR

CVE-2022-46289CRITICAL9.8PL ✓same product

Open Babel: zapis poza buforem w obsłudze formatu ORCA (RCE)