PYSEC-2026-2781 Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

Summary A memory-safety vulnerability in Open Babel's SMILES parser caused a heap buffer overflow when reading a crafted input string. Details The flaw was in OBSmilesParser::ParseSmiles. A malformed SMILES input caused the parser to write past the end of a heap-allocated buffer. Impact Open Babe...

Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

Summary A memory-safety vulnerability in Open Babel's SMILES parser caused a heap buffer overflow when reading a crafted input string. Details The flaw was in OBSmilesParser::ParseSmiles. A malformed SMILES input caused the parser to write past the end of a heap-allocated buffer. Impact Open Babe...

openbabel:fuzz_obconversion_smiles: Heap-buffer-overflow in OpenBabel::OBSmilesParser::ParseSmiles

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4664580468178944 Project: openbabel Fuzzing Engine: honggfuzz Fuzz Target: fuzzobconversionsmiles Job Type: honggfuzzasanopenbabel Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

Linux Distros Unpatched Vulnerability : CVE-2025-10996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the OBSmilesParser::ParseSmiles function. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted input to the affected process. Remediation There is no fixed...

Duplicate Advisory: Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-j35x-w4gj-pf7w. This link is maintained to preserve external references. Original Description A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles o...

UBUNTU-CVE-2025-10996

A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit is now public and ma...

CVE-2025-10996

Open Babel up to 3.1.1 is affected by a heap-based buffer overflow in OBSmilesParser::ParseSmiles (Smiles format parser) within /src/formats/smilesformat.cpp. The vulnerability can be triggered by manipulating input and requires local access; an exploit has been made public. Affected versions up ...

CVE-2025-10996: Heap-based Buffer Overflow

A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit is now public and ma...

PT-2025-39481

Name of the Vulnerable Software and Affected Versions Open Babel versions through 3.1.1 Description A heap-based buffer overflow exists in Open Babel due to a flaw in the OBSmilesParser::ParseSmiles function located in the /src/formats/smilesformat.cpp file. Local exploitation of this issue is...

openbabel:fuzz_obconversion_smiles: Container-overflow in OpenBabel::OBSmilesParser::ParseSmiles

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=5178617819693056 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsmiles Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Container-overflow READ 4 Crash...