ANT-2026-N7D3E5WK · rdkit · heap-use-after-free

use-after-free high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-N7D3E5WK: Heap-use-after-free in...

rdkit:mol_deserialization_fuzzer: Crash in void RDKit::MolPickler::_addRingInfoFromPickle<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=4803008000229376 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldeserializationfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffaffffffffffc Crash State: void...

rdkit:smiles_string_to_mol_fuzzer: Bad-cast to RDKit::AtomRDKit::Canon::initCanonAtoms in RDKit::Canon::rankMolAtoms

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5467587030089728 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x589365a426d0 Crash...

rdkit:smiles_string_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::Chirality::cleanupStereoGroups

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4702946361147392 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

rdkit:smiles_string_to_mol_fuzzer: Bad-cast to RDKit::Atom from invalid vptr in RDKit::Canon::initCanonAtoms

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6396301163167744 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5c2e9f3266d0 Crash...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::SGroupParsing::ParseV3000SGroupsBlock

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5517848155848704 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

rdkit:mol_deserialization_fuzzer: Heap-buffer-overflow in RDKit::streamRead

Detailed Report: https://oss-fuzz.com/testcase?key=4553794922020864 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldeserializationfuzzer Job Type: libfuzzerasani386rdkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf4d01174 Crash State: RDKit::streamRead...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in __cxxabiv1::__aligned_malloc_with_fallback

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6722092342247424 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x002d00000025...

rdkit:mol_deserialization_fuzzer: Heap-buffer-overflow in RDKit::streamRead

Detailed Report: https://oss-fuzz.com/testcase?key=5594451295928320 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldeserializationfuzzer Job Type: libfuzzerasani386rdkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf4d02754 Crash State: RDKit::streamRead...

PT-2025-35588

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=421736524 Crash type: UNKNOWN READ Crash state: RDKit::RDValue::destroy RDKit::Dict::clearVal RDKit::RDProps::clearProp...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in RDKit::RDValue::destroy

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5784149845934080 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000014000000...

OSV-2025-62 UNKNOWN READ in RDKit::Dict::reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391962480 Crash type: UNKNOWN READ Crash state: RDKit::Dict::reset RDKit::Atom::Atom RDKit::QueryAtom::QueryAtom...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in RDKit::Dict::reset

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4784563116638208 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00003c000000...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in RDKit::Bond::~Bond

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6113228765069312 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000020000000...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<cha

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6046179775610880 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

rdkit:smiles_string_to_mol_fuzzer: Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6503465377988608 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerasanrdkit Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

OSV-2024-838 Bad-cast to RDKit::AtomRDKit::ROMol::initFromOther

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68998 Crash type: Bad-cast Crash state: Bad-cast to RDKit::AtomRDKit::ROMol::initFromOther RDKit::ROMol::ROMol RDKit::RecursiveStructureQuery::copy...

PT-2024-40858

Name of the Vulnerable Software and Affected Versions RDKit affected versions not specified Description The issue is related to a crash caused by a bad-cast in the RDKit library. Specifically, the crash occurs when there is a bad-cast to RDKit::AtomRDKit::ROMol::initFromOther, which is part of th...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::AtomRDKit::ROMol::initFromOther in RDKit::ROMol::ROMol

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4925716993998848 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002c2ece0 Crash...

rdkit:smiles_string_to_mol_fuzzer: Heap-use-after-free in RDKit::Canon::initCanonAtoms

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5547297211482112 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerasanrdkit Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...