OSV-2020-1849 Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25906 Crash type: Use-of-uninitialized-value Crash state: RDKit::SubstanceGroup::getBondType RDKit::SubstanceGroup::addCState RDKit::SGroupParsing::ParseSGroupV2000SBVLine...

PT-2020-22003

Name of the Vulnerable Software and Affected Versions RDKit affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the RDKit::SubstanceGroup::getBondType function, which is called by...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5413025698545664 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in __dynamic_cast

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6033801128706048 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff0000000...

OSV-2020-1730 Bad-cast to RDKit::Atom

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25547 Crash type: Bad-cast Crash state: Bad-cast to RDKit::Atom...

PT-2020-21959

Name of the Vulnerable Software and Affected Versions RDKit affected versions not specified Description The issue is related to a crash caused by a bad-cast to RDKit::Atom. Recommendations At the moment, there is no information about a newer version that contains a fix for this issue...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::Atom

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5703990850093056 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003742600 Crash...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::ROMol::getAtomWithBookmark

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5121526054256640 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in std::__1::vector<unsigned int, std::__1::allocator<unsigned int> >::reserve

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5762452447559680 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

rdkit:mol_deserialization_fuzzer: Crash in RDKit::RingInfo::addRing

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5001378521677824 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldeserializationfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7faf4bde3008 Crash State:...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::SubstanceGroup::includesAtom

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6204566230794240 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::Atom from invalid vptr in RDKit::SubstanceGroup::addAtomWithBookmark

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6001237489876992 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000032d2ea0 Crash...

rdkit:mol_data_stream_to_mol_fuzzer: Stack-buffer-overflow in RDKit::ParseMolBlockProperties

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5068710860292096 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerasani386rdkit Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address...

OSV-2020-1453 UNKNOWN READ in RDKit::labelRecursivePatterns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24352 Crash type: UNKNOWN READ Crash state: RDKit::labelRecursivePatterns RDKit::SmartsToMol RDKit::ParseMarvinSmartsLine...

OSV-2020-1366 Heap-use-after-free in RDKit::SubstanceGroup::addParentAtomWithBookmark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24406 Crash type: Heap-use-after-free READ 4 Crash state: RDKit::SubstanceGroup::addParentAtomWithBookmark RDKit::SGroupParsing::ParseSGroupV2000VectorDataLine RDKit::ParseMolBlockProperties...

PT-2020-21847

Name of the Vulnerable Software and Affected Versions RDKit affected versions not specified Description The issue is related to a heap-use-after-free error. Technical details about the crash include the RDKit::SubstanceGroup::addParentAtomWithBookmark function,...

PT-2020-21872

Name of the Vulnerable Software and Affected Versions RDKit affected versions not specified Description The issue is related to a crash caused by an unknown read. Technical details about the crash include the involvement of specific function names such as labelRecursivePatterns, SmartsToMol, and...

rdkit:smiles_string_to_mol_fuzzer: Stack-buffer-overflow in bool SmilesParseOps::parser::read_int<std::__1::__wrap_iter<char const*> >

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6210527601360896 Project: rdkit Fuzzing Engine: afl Fuzz Target: smilesstringtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff0e6f2108...

rdkit:mol_data_stream_to_mol_fuzzer: Heap-use-after-free in RDKit::SubstanceGroup::addParentAtomWithBookmark

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4847273910206464 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldatastreamtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x607000002044...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::ATOM_EQUALS_QUERY' (aka 'EqualityQuery<int, const RDKit::Atom *, true>') from Queries::AndQuery<int, RDKit::Atom const*, true> in RDKit::completeMolQueries

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6283901044260864 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002a4a110 Crash...