GHSA-M982-7Q3H-R784 Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

Summary A memory-safety vulnerability in Open Babel's PQS parser caused an out-of-bounds pre-buffer read when reading a crafted input file. Details The flaw was in the lowerit helper used by the PQS parser. A malformed input caused the helper to read one or more bytes before the start of its inpu...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-11000 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-11000 Source advisory: GHSA-M982-7Q3H-R784...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-11000 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-11000 Source advisory: OSV:GHSA-M982-7Q3H-R784...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2025-11000 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2025-11000 Source advisory: OSV:GHSA-M982-7Q3H-R784...

bcforms (>=0.0.2, <=0.0.8), bpforms (>=0.0.12, <=0.0.15) +1 more potentially affected by CVE-2025-11000 via openbabel (2.4.1)

openbabel PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - bcforms =0.0.2, =0.0.12, =0.1.0, =0.6.1 Source cves: CVE-2025-11000 Source advisory: OSV:GHSA-M982-7Q3H-R784...

Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

Summary A memory-safety vulnerability in Open Babel's PQS parser caused an out-of-bounds pre-buffer read when reading a crafted input file. Details The flaw was in the lowerit helper used by the PQS parser. A malformed input caused the helper to read one or more bytes before the start of its inpu...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10999 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10999 Source advisory: GHSA-55J6-RJHX-HWFH...

bcforms (>=0.0.2, <=0.0.8), bpforms (>=0.0.12, <=0.0.15) +1 more potentially affected by CVE-2025-10999 via openbabel (2.4.1)

openbabel PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - bcforms =0.0.2, =0.0.12, =0.1.0, =0.6.1 Source cves: CVE-2025-10999 Source advisory: OSV:GHSA-55J6-RJHX-HWFH...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2025-10999 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2025-10999 Source advisory: OSV:GHSA-55J6-RJHX-HWFH...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10999 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10999 Source advisory: OSV:GHSA-55J6-RJHX-HWFH...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10998 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10998 Source advisory: GHSA-J9PP-7WFG-Q7FJ...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2025-10998 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2025-10998 Source advisory: OSV:GHSA-J9PP-7WFG-Q7FJ...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10998 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10998 Source advisory: OSV:GHSA-J9PP-7WFG-Q7FJ...

bcforms (>=0.0.2, <=0.0.8), bpforms (>=0.0.12, <=0.0.15) +1 more potentially affected by CVE-2025-10998 via openbabel (2.4.1)

openbabel PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - bcforms =0.0.2, =0.0.12, =0.1.0, =0.6.1 Source cves: CVE-2025-10998 Source advisory: OSV:GHSA-J9PP-7WFG-Q7FJ...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10997 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10997 Source advisory: OSV:GHSA-8WQ6-QH76-WPV9...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2025-10997 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2025-10997 Source advisory: OSV:GHSA-8WQ6-QH76-WPV9...

bcforms (>=0.0.2, <=0.0.8), bpforms (>=0.0.12, <=0.0.15) +1 more potentially affected by CVE-2025-10997 via openbabel (2.4.1)

openbabel PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - bcforms =0.0.2, =0.0.12, =0.1.0, =0.6.1 Source cves: CVE-2025-10997 Source advisory: OSV:GHSA-8WQ6-QH76-WPV9...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10997 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10997 Source advisory: GHSA-8WQ6-QH76-WPV9...

OPENSUSE-SU-2026:21190-1 Security update for openbabel

This update for openbabel fixes the following issues: Changes in openbabel: - Update to version 3.2.0: Add an L-BFGS optimizer, used by default for gen3d and conformer searches New macrocycle ring builder Dale codes for better initial 3D geometry of large rings Add KET Ketcher JSON and ChemicalJS...

PT-2026-55098

Summary A memory-safety vulnerability in Open Babel's CACAO parser caused a NULL pointer dereference when reading a crafted input file. Details The flaw was in CacaoFormat::SetHilderbrandt. A malformed input caused the parser to dereference a NULL pointer while applying the Hilderbrandt...