CVE-2022-46292

CRITICAL9.8

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3

Published Jul 21, 2023

Modified 11 months ago

Details

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section

References

WEB

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2022-46292

WEB

https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1666

CVSS Analysis

CVSS v3.1

9.8

Exploitability

Attack Vector