Enviar #654060: Open Babel 3.1.1 / master commit 889c350 Heap-based Buffer Overflowinformación

TítuloOpen Babel 3.1.1 / master commit 889c350 Heap-based Buffer Overflow
DescripciónOpen Babel 3.1.1 (master commit 889c350) is vulnerable to a heap-buffer-overflow in the OBSmilesParser::ParseSmiles function. When parsing certain malformed SMILES strings, the parser performs an out-of-bounds read on a dynamically allocated vector of integers, resulting in undefined behavior and potential denial of service (DoS). An attacker can exploit this vulnerability by supplying crafted input to applications or tools that rely on Open Babel for SMILES parsing.
Fuente⚠️ https://github.com/openbabel/openbabel/issues/2831
Usuario ahuo (UID 90189)
Sumisión2025-09-14 10:03 (hace 1 Año)
Moderación2025-09-25 20:05 (11 days later)
EstadoAceptado
Entrada de VulDB325924 [Open Babel hasta 3.1.1 smilesformat.cpp ParseSmiles desbordamiento de búfer]
Puntos20

Interested in the pricing of exploits?

See the underground prices here!