PT-2026-55098

Summary A memory-safety vulnerability in Open Babel's CACAO parser caused a NULL pointer dereference when reading a crafted input file. Details The flaw was in CacaoFormat::SetHilderbrandt. A malformed input caused the parser to dereference a NULL pointer while applying the Hilderbrandt...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10996 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10996 Source advisory: GHSA-J35X-W4GJ-PF7W...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10996 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10996 Source advisory: OSV:GHSA-J35X-W4GJ-PF7W...

bcforms (>=0.0.2, <=0.0.8), bpforms (>=0.0.12, <=0.0.15) +1 more potentially affected by CVE-2025-10996 via openbabel (2.4.1)

openbabel PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - bcforms =0.0.2, =0.0.12, =0.1.0, =0.6.1 Source cves: CVE-2025-10996 Source advisory: OSV:GHSA-J35X-W4GJ-PF7W...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2025-10996 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2025-10996 Source advisory: OSV:GHSA-J35X-W4GJ-PF7W...

EUVD-2025-31199

Open Babel has out-of-bounds write overlapping memcpy in zipstream basicunzipstreambuf::underflow...

bcforms (>=0.0.2, <=0.0.8), bpforms (>=0.0.12, <=0.0.15) +1 more potentially affected by CVE-2025-10995 via openbabel (2.4.1)

openbabel PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - bcforms =0.0.2, =0.0.12, =0.1.0, =0.6.1 Source cves: CVE-2025-10995 Source advisory: OSV:GHSA-8J3X-M868-CPW8...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2025-10995 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2025-10995 Source advisory: OSV:GHSA-8J3X-M868-CPW8...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10995 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10995 Source advisory: GHSA-8J3X-M868-CPW8...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10995 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10995 Source advisory: OSV:GHSA-8J3X-M868-CPW8...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10994 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10994 Source advisory: OSV:GHSA-PP85-5J63-XPQ3...

bcforms (>=0.0.2, <=0.0.8), bpforms (>=0.0.12, <=0.0.15) +1 more potentially affected by CVE-2025-10994 via openbabel (2.4.1)

openbabel PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - bcforms =0.0.2, =0.0.12, =0.1.0, =0.6.1 Source cves: CVE-2025-10994 Source advisory: OSV:GHSA-PP85-5J63-XPQ3...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2025-10994 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2025-10994 Source advisory: OSV:GHSA-PP85-5J63-XPQ3...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2025-10994 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2025-10994 Source advisory: GHSA-PP85-5J63-XPQ3...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2026-3408 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2026-3408 Source advisory: GHSA-RXPR-WQ63-JR7P...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2026-3408 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2026-3408 Source advisory: OSV:GHSA-RXPR-WQ63-JR7P...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2026-3408 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2026-3408 Source advisory: OSV:GHSA-RXPR-WQ63-JR7P...

bcforms (>=0.0.2, <=0.0.8), bpforms (>=0.0.12, <=0.0.15) +1 more potentially affected by CVE-2026-3408 via openbabel (2.4.1)

openbabel PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - bcforms =0.0.2, =0.0.12, =0.1.0, =0.6.1 Source cves: CVE-2026-3408 Source advisory: OSV:GHSA-RXPR-WQ63-JR7P...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2026-2705 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2026-2705 Source advisory: OSV:GHSA-4W5W-4FHM-Q483...

bcforms (0.0.9), bpforms (0.0.16) +3 more potentially affected by CVE-2026-2705 via openbabel (>=3.0.0a1, <=3.1.1.1)

openbabel PYPI version =3.0.0a1, =1.0.0, =9.1.1 - obj-tables 0.0.8 Source cves: CVE-2026-2705 Source advisory: OSV:GHSA-4W5W-4FHM-Q483...