openbabel 资源管理错误漏洞

openbabel is a chemistry toolkit software from Open Babel open source. A resource management error vulnerability exists in openbabel 3.1.1 and earlier versions, which stems from a post-release reuse issue in the GAMESSOutputFormat::ReadMolecule function in the file gamessformat.cpp, which could...

Malicious code in molecule_h2ypp_dea3s_ocean (npm)

The package moleculeh2yppdea3socean was found to contain malicious code...

MAL-2025-23211 Malicious code in infinity_jbre7_244gf_molecule (npm)

The package infinityjbre7244gfmolecule was found to contain malicious code...

MAL-2025-26618 Malicious code in molecule_o6xjw_0rh6u_infinity (npm)

The package moleculeo6xjw0rh6uinfinity was found to contain malicious code...

Malicious code in utopia_vdu25_hbbct_molecule (npm)

The package utopiavdu25hbbctmolecule was found to contain malicious code...

MAL-2025-31424 Malicious code in quiver_oragi_k5skk_molecule (npm)

The package quiveroragik5skkmolecule was found to contain malicious code...

The vulnerability of the WriteMoleculeCSRFormat function in the Open Babel file format conversion software allows a hacker to execute arbitrary code.

The vulnerability of the WriteMoleculeCSRFormat function in the Open Babel file format conversion software is related to the execution of the operation outside the buffer memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GHSA-QGHV-8H77-699V Duplicate Advisory: Open Babel has out-of-bounds write in MOL2 attribute/value parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vjg6-gm8m-v5g6. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1...

GHSA-6P3C-V8VC-C244 The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.

Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release...

ckb-analyzer (0.39.2), ckb-app-config (>=0.37.0-pre, <=0.100.0-rc2) +57 more potentially affected by CVE-2021-45697 via molecule (>=0.2.5, <=0.7.1)

molecule CARGO version =0.2.5, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.40.0, =0.40.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.1.0, =0.37.0-pre, =0.39.1 and more Source cves: CVE-2021-45697 Source advisory: OSV:GHSA-6P3C-V8VC-C244...

Mozilla Rust has an unspecified vulnerability (CNVD-2022-03122)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A security vulnerability exists in versions of Mozilla Rust molecule crate prior to 0.7.2, which stems from incorrect results read by FixVec. No details of the vulnerability are currently available...

CVE-2021-45697

An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result...

CVE-2021-45697

An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result...

CVE-2021-45697

An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result...

Default configuration

An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A security vulnerability exists in versions of Mozilla Rust molecule crate prior to 0.7.2, which stems from incorrect results read by FixVec. No details of the vulnerability are currently available...

CVE-2021-45697

An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result...

CVE-2021-45697

Summary: CVE-2021-45697 affects the Rust crate molecule prior to 0.7.2. The root cause is an incorrect result in a FixVec partial read, leading to incorrect read lengths/results. The vulnerability is tied to the FixVec handling in molecule, with impact described as incorrect read behavior; exploi...

ckb-analyzer (0.39.2), ckb-app-config (>=0.37.0-pre, <=0.100.0-rc2) +57 more potentially affected by CVE-2021-45697 via molecule (>=0.2.5, <=0.7.1)

molecule CARGO version =0.2.5, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.40.0, =0.40.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.1.0, =0.37.0-pre, =0.39.1 and more Source cves: CVE-2021-45697 Source advisory: OSV:GHSA-82HM-VH7G-HRH9...

GHSA-82HM-VH7G-HRH9 Partial read is incorrect in molecule

Impact Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release. Workarounds If you already have the whole FixVec A, you can use A.asslice.len to get the total size o...