30 matches found
PYSEC-2026-2784 Open Babel has uninitialized pointer dereference in MSI atom parser
Summary A memory-safety vulnerability in Open Babel's MSI parser caused an uninitialized pointer dereference when reading a crafted input file. Details The flaw was in the atom handling of the MSI reader. A malformed record caused the parser to dereference an atom pointer that had never been...
PYSEC-2026-2786 Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
Summary A memory-safety vulnerability in Open Babel's MOPAC input parser allowed an out-of-bounds write into the translationVectors array when reading Tv translation-vector atoms from a crafted input file. Details The MOPAC IN reader stored Tv-atom translation vectors into a fixed-size...
PYSEC-2026-2792 Open Babel has out-of-bounds write in MOL2 attribute/value parser
Summary A memory-safety vulnerability in Open Babel's MOL2 parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the attribute/value parsing path of the MOL2 reader. An over-long attribute or value caused the parser to write past the end of a fixed-size...
PT-2026-59417
Summary A memory-safety vulnerability in Open Babel's ChemKin parser caused a heap buffer overflow when reading a crafted input file. Details The flaw was in ChemKinFormat::CheckSpecies. A malformed species record caused the parser to write past the end of a heap-allocated buffer. Impact Open Bab...
PT-2026-59418
Summary A memory-safety vulnerability in Open Babel's PQS parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the coord file parsing path of the PQS reader. A malformed coord file specifier caused the parser to write past the end of its destination...
openSUSE 16: libopenbabel8 / openbabel / openbabel-devel / openbabel-gui / etc (openSUSE-SU-2026:21190-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21190-1 advisory. Changes in openbabel: - Update to version 3.2.0: Add an L-BFGS optimizer, used by default for gen3d and conformer searches New macrocycle ring...
Security update for openbabel (critical)
openSUSE security update: security update for openbabel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21190-1 Rating: critical References: bsc1217676 bsc1258501 bsc1258507 bsc1259041 Cross-References: CVE-2022-37331 CVE-2022-41793 CVE-2022-42885...
GHSA-P594-7XW4-G76P Open Babel has out-of-bounds write in CSR PadString (title field)
Summary A memory-safety vulnerability in Open Babel's CSR parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the PadString helper used to handle the CSR title field. A title longer than the fixed destination buffer caused the parser to write past the...
GHSA-M982-7Q3H-R784 Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
Summary A memory-safety vulnerability in Open Babel's PQS parser caused an out-of-bounds pre-buffer read when reading a crafted input file. Details The flaw was in the lowerit helper used by the PQS parser. A malformed input caused the helper to read one or more bytes before the start of its inpu...
OPENSUSE-SU-2026:21190-1 Security update for openbabel
This update for openbabel fixes the following issues: Changes in openbabel: - Update to version 3.2.0: Add an L-BFGS optimizer, used by default for gen3d and conformer searches New macrocycle ring builder Dale codes for better initial 3D geometry of large rings Add KET Ketcher JSON and ChemicalJS...
PT-2026-55112
Summary A memory-safety vulnerability in Open Babel's ChemKin parser caused a heap buffer overflow when reading a crafted input file. Details The flaw was in ChemKinFormat::CheckSpecies. A malformed species record caused the parser to write past the end of a heap-allocated buffer. Impact Open Bab...
PT-2026-55098
Summary A memory-safety vulnerability in Open Babel's CACAO parser caused a NULL pointer dereference when reading a crafted input file. Details The flaw was in CacaoFormat::SetHilderbrandt. A malformed input caused the parser to dereference a NULL pointer while applying the Hilderbrandt...
EUVD-2025-31199
Open Babel has out-of-bounds write overlapping memcpy in zipstream basicunzipstreambuf::underflow...
Security update for openbabel (moderate)
openSUSE Security Update: Security update for openbabel Announcement ID: openSUSE-SU-2026:0220-1 Rating: moderate References: 1258501 Cross-References: CVE-2026-2704 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update...
OSV-2026-803 Container-overflow in OpenBabel::MDLFormat::ReadV3000Block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=515663946 Crash type: Container-overflow READ 1 Crash state: OpenBabel::MDLFormat::ReadV3000Block OpenBabel::MDLFormat::ReadMolecule OpenBabel::OBConversion::Read...
๐ OpenBabel 3.1.1 Heap Buffer Overflow
This project is a local exploitation research and crash detection framework designed to evaluate memory-safety weaknesses in Open Babel version 3.1.1 under controlled laboratory conditions...
openbabel ไปฃ็ ้ฎ้ขๆผๆด
OpenBabel is an open-source chemistry toolkit software developed by Open Babel. Versions of OpenBabel 3.1.1 and earlier contained code vulnerabilities. These vulnerabilities stemmed from a null pointer dereferencing in the OBAtom::GetExplicitValence function in the isrc/atom.cpp file, which could...
๐ OpenBabel 3.1.1 Parsing Issues
This Metasploit auxiliary module generates specially crafted proof of concept files targeting potential parsing vulnerabilities in OpenBabel version 3.1.1 such as NULL pointer dereference and out-of-bounds read conditions...
openbabel ็ผๅฒๅบ้่ฏฏๆผๆด
OpenBabel is an open-source chemical toolkit software developed by Open Babel. Versions of OpenBabel 3.1.1 and earlier contained a buffer error vulnerability, which stemmed from an out-of-bounds read in the function OBAtom::SetFormalCharge within the library file include/openbabel/atom.h...
openbabel ็ผๅฒๅบ้่ฏฏๆผๆด
OpenBabel is an open-source chemical toolkit software developed by Open Babel. Versions of OpenBabel 3.1.1 and earlier contained a buffer error vulnerability, which stemmed from an out-of-bounds read in the function OpenBabel::transform3d::DescribeAsString located in the file...