openbabel:fuzz_obconversion_smiles: Heap-buffer-overflow in OpenBabel::OBSmilesParser::ParseSmiles

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4664580468178944 Project: openbabel Fuzzing Engine: honggfuzz Fuzz Target: fuzzobconversionsmiles Job Type: honggfuzzasanopenbabel Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

openbabel:fuzz_obconversion_sdf: Heap-buffer-overflow in OpenBabel::MDLFormat::ReadV3000Block

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4554638784528384 Project: openbabel Fuzzing Engine: honggfuzz Fuzz Target: fuzzobconversionsdf Job Type: honggfuzzasanopenbabel Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

openbabel:fuzz_convert: Crash in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=5138756882726912 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerubsanopenbabel Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x007200000075...

Linux Distros Unpatched Vulnerability : CVE-2025-11000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in Open Babel up to 3.1.1. This affects the function PQSFormat::ReadMolecule of the file /src/formats/PQSformat.cpp. This...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the ReadMolecule function in the PQSFormat component. An attacker can cause a denial of service by providing crafted input that triggers a null pointer dereference during local processing. Remediation There ...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the OBSmilesParser::ParseSmiles function. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted input to the affected process. Remediation There is no fixed...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the CheckSpecies function in the ChemKinFormat process. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted input that triggers a heap-based buffer overflow...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the SetHilderbrandt function. An attacker can cause a denial of service by triggering a null pointer dereference through local access. Remediation There is no fixed version for openbabel/openbabel. References...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the ReadReactionQualifierLines function. An attacker can cause a denial of service by providing crafted input that triggers a null pointer dereference during local processing. Remediation There is no fixed...

bcforms (>=0.0.2, <=0.0.9), bpforms (>=0.0.12, <=0.0.16) +5 more potentially affected by CVE-2025-11000 via openbabel (>=2.4.0, <=3.1.1.1)

openbabel PYPI version =2.4.0, =0.0.2, =0.0.12, =0.1.0, =1.0.0, =2.1.3, =2.1.7 Source cves: CVE-2025-11000 Source advisory: MEND:CVE-2025-11000...

bcforms (>=0.0.2, <=0.0.9), bpforms (>=0.0.12, <=0.0.16) +5 more potentially affected by CVE-2025-10999 via openbabel (>=2.4.0, <=3.1.1.1)

openbabel PYPI version =2.4.0, =0.0.2, =0.0.12, =0.1.0, =1.0.0, =2.1.3, =2.1.7 Source cves: CVE-2025-10999 Source advisory: MEND:CVE-2025-10999...

bcforms (>=0.0.2, <=0.0.9), bpforms (>=0.0.12, <=0.0.16) +5 more potentially affected by CVE-2025-10998 via openbabel (>=2.4.0, <=3.1.1.1)

openbabel PYPI version =2.4.0, =0.0.2, =0.0.12, =0.1.0, =1.0.0, =2.1.3, =2.1.7 Source cves: CVE-2025-10998 Source advisory: MEND:CVE-2025-10998...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the underflow function in zipstreamimpl.h. An attacker can cause memory corruption by providing crafted input to this function. Remediation There is no fixed version for openbabel/openbabel. References...

CVE-2025-10997 Open Babel chemkinformat.cpp CheckSpecies heap-based overflow

A flaw has been found in Open Babel up to 3.1.1. Impacted is the function ChemKinFormat::CheckSpecies of the file /src/formats/chemkinformat.cpp. Executing manipulation can lead to heap-based buffer overflow. The attack can only be executed locally. The exploit has been published and may be used...

bcforms (>=0.0.2, <=0.0.9), bpforms (>=0.0.12, <=0.0.16) +5 more potentially affected by CVE-2025-10997 via openbabel (>=2.4.0, <=3.1.1.1)

openbabel PYPI version =2.4.0, =0.0.2, =0.0.12, =0.1.0, =1.0.0, =2.1.3, =2.1.7 Source cves: CVE-2025-10997 Source advisory: MEND:CVE-2025-10997...

bcforms (>=0.0.2, <=0.0.9), bpforms (>=0.0.12, <=0.0.16) +5 more potentially affected by CVE-2025-10996 via openbabel (>=2.4.0, <=3.1.1.1)

openbabel PYPI version =2.4.0, =0.0.2, =0.0.12, =0.1.0, =1.0.0, =2.1.3, =2.1.7 Source cves: CVE-2025-10996 Source advisory: MEND:CVE-2025-10996...

bcforms (>=0.0.2, <=0.0.9), bpforms (>=0.0.12, <=0.0.16) +5 more potentially affected by CVE-2025-10995 via openbabel (>=2.4.0, <=3.1.1.1)

openbabel PYPI version =2.4.0, =0.0.2, =0.0.12, =0.1.0, =1.0.0, =2.1.3, =2.1.7 Source cves: CVE-2025-10995 Source advisory: MEND:CVE-2025-10995...

bcforms (>=0.0.2, <=0.0.9), bpforms (>=0.0.12, <=0.0.16) +5 more potentially affected by CVE-2025-10994 via openbabel (>=2.4.0, <=3.1.1.1)

openbabel PYPI version =2.4.0, =0.0.2, =0.0.12, =0.1.0, =1.0.0, =2.1.3, =2.1.7 Source cves: CVE-2025-10994 Source advisory: MEND:CVE-2025-10994...

OpenBabel code issues and vulnerabilities

openbabel is a chemistry toolkit software from Open Babel open source. A code issue vulnerability exists in openbabel 3.1.1 and earlier versions, which stems from the presence of a null pointer dereference in the function CacaoFormat::SetHilderbrandt in the file /src/formats/cacaoformat.cpp, whic...

openbabel:fuzz_convert: Index-out-of-bounds in OpenBabel::TSimpleMolecule::defineAtomConn

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6539223123689472 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerubsanopenbabel Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...