CRITICAL🇵🇱 Wersja polska

CVE-2022-46289

CVSS 9.8v3.1pub. 2023-07-21upd. 2025-11-04

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.nAtoms calculation wrap-around, leading to a small buffer allocation

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Openbabel Open Babel

    APP
    Openbabel
    3.1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2022-44451CRITICAL9.8PL ✓same product

Open Babel: niezainicjowany wskaźnik w formacie MSI umożliwia RCE

CVE-2022-42885CRITICAL9.8PL ✓same product

RCE w Open Babel — niezainicjowany wskaźnik w parserze formatu GRO

CVE-2022-43467CRITICAL9.8PL ✓same product

Out-of-bounds write w Open Babel — RCE przez plik PQS

CVE-2022-41793CRITICAL9.8PL ✓same product

Out-of-bounds write w Open Babel — RCE przez złośliwy plik CSR

CVE-2022-46280CRITICAL9.8PL ✓same product

RCE poprzez niezainicjowany wskaźnik w Open Babel (format PQS)