Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the underflow function in zipstreamimpl.h. An attacker can cause memory corruption by providing crafted input to this function. Remediation There is no fixed version for openbabel/openbabel. References...

OpenBabel buffer error vulnerability

openbabel is a chemistry toolkit software open-sourced by Open Babel. A buffer error vulnerability exists in openbabel 3.1.1 and earlier versions, which stems from a memory corruption issue in the zlibstream::basicunzipstreambuf::underflow function, which could lead to a local attack...