Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)

Also known as GHSA-55f6-pf8r-c2f4, PYSEC-2026-2771

Published 3 y ago 2023-07-21 · modified 3 mo ago 2026-07-20 · JSON

CVSS

9.8

v3.1 · CNA

CISA KEV

not known exploited

EPSS

0.8%

percentile 57%

Public exploits

none known

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section

CISA SSVC assessment

Exploitation: Proof of concept public
Automatable: no
Technical impact: total
Assessed: 2 y ago 2024-10-24

Exploit prediction (EPSS)

0.80% probability of exploitation in the next 30 days, higher than 57% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.1	9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CNA	3.1	9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	3.1	7.8	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`
OSV	3.1	7.8	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`
GitHub	3.1	7.8	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Affected packages

Ecosystem	Package	Affected	Fixed in
pypi	`openbabel`	<3.2.0	3.2.0

Affected products

Open Babel Open Babel

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787 Out-of-bounds Write

References

talosintelligence.com /vulnerability_reports/TALOS-2022-1666 · x_transferred
talosintelligence.com /vulnerability_reports/TALOS-2022-1666
github.com /openbabel/openbabel/security/advisories/GHSA-55f6-pf8r-c2f4 · web
nvd.nist.gov /vuln/detail/CVE-2022-46292 · advisory
github.com /openbabel/openbabel/commit/40e852138f21d586b7ccdce6329e7b23a87168bb · web
github.com /openbabel/openbabel · package
pypi.org /project/openbabel · package
github.com /advisories/GHSA-55f6-pf8r-c2f4 · advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary