إرسال #654060: Open Babel 3.1.1 / master commit 889c350 Heap-based Buffer Overflowالمعلومات

عنوانOpen Babel 3.1.1 / master commit 889c350 Heap-based Buffer Overflow
الوصفOpen Babel 3.1.1 (master commit 889c350) is vulnerable to a heap-buffer-overflow in the OBSmilesParser::ParseSmiles function. When parsing certain malformed SMILES strings, the parser performs an out-of-bounds read on a dynamically allocated vector of integers, resulting in undefined behavior and potential denial of service (DoS). An attacker can exploit this vulnerability by supplying crafted input to applications or tools that rely on Open Babel for SMILES parsing.
المصدر⚠️ https://github.com/openbabel/openbabel/issues/2831
المستخدم ahuo (UID 90189)
ارسال14/09/2025 10:03 AM (11 أشهر منذ)
الاعتدال25/09/2025 08:05 PM (11 days later)
الحالةتمت الموافقة
إدخال VulDB325924 [Open Babel حتى 3.1.1 smilesformat.cpp ParseSmiles تلف الذاكرة]
النقاط20

Do you know our Splunk app?

Download it now for free!