CVE-2026-3408

Open Babel versions up to 3.1.1 are affected in the CDXML File Handler, specifically OBAtom::GetExplicitValence in isrc/atom.cpp, where input manipulation can trigger a null pointer dereference. The issue can be exploited remotely and a public exploit is available. A patch identified as e23a224b8...