by Kastro
Paper/Archive/CVE-2022-46292

CVE-2022-46292

Open Babel Open Babel — Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open…

EPSS 0.8%public exploitCVSS 9.8
critical.is priorityof 100
51
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 56.7.567 × 2011.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section

Affected

ProductAffectedFixed inSource
Open Babel3.1.1–CNA
Open Babelmaster commit 530dbfa3–CNA

Scores by source

talos (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

reftalosintelligence.com/vulnerability_reports/TALOS-2022-1666reftalosintelligence.com/vulnerability_reports/TALOS-2022-1666