Debian Openbabel vulnerabilities

CVE-2026-2704 [LOW] CWE-119 Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString > ### Summary > > A memory-safety vulnerability in Open Babel's CIF file format parser > allowed an out-of-bounds read when reading a crafted input file. > > ### Details > > The flaw was in `OpenBabel::transform3d::DescribeAsString`. A malformed > symmetry-operation string caused the parser to read past the end of its > i

CVE-2025-10997 [HIGH] CWE-119 Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies ### Summary A memory-safety vulnerability in Open Babel's ChemKin parser caused a heap buffer overflow when reading a crafted input file. ### Details The flaw was in `ChemKinFormat::CheckSpecies`. A malformed species record caused the parser to write past the end of a heap-allocated buffer. ### Impact Open Babel

CVE-2025-10996 [HIGH] CWE-119 Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles ### Summary A memory-safety vulnerability in Open Babel's SMILES parser caused a heap buffer overflow when reading a crafted input string. ### Details The flaw was in `OBSmilesParser::ParseSmiles`. A malformed SMILES input caused the parser to write past the end of a heap-allocated buffer. ### Impact Open Babel is

CVE-2026-2705 [LOW] CWE-119 Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge ### Summary A memory-safety vulnerability in Open Babel's MOL2 file format parser caused a NULL pointer dereference when reading a crafted input file. ### Details The flaw was in `OBAtom::SetFormalCharge` as called from the MOL2 parser. A malformed atom record caused the parser to call the method on a NULL atom pointer. #

CVE-2025-10994 [LOW] CWE-119 Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule ### Summary A memory-safety vulnerability in Open Babel's GAMESS output parser caused a use-after-free when reading a crafted input file. ### Details The flaw was in `GAMESSOutputFormat::ReadMolecule`. A malformed input caused the parser to dereference a stale pointer after the underlying object had been freed. ### Imp

CVE-2025-10995 [LOW] CWE-787 Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow ### Summary A memory-safety vulnerability in Open Babel's bundled zipstream decompression code caused an out-of-bounds write via overlapping `memcpy` when reading a crafted gzip-compressed chemistry file. ### Details The flaw was in `basic_unzip_streambuf::underf

CVE-2022-46293 [HIGH] CWE-119 Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT) Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT) ### Summary A memory-safety vulnerability in Open Babel's MOPAC output parser allowed an out-of-bounds write into the `translationVectors[]` array when reading the "FINAL POINT" block of a crafted input file. ### Details The MOPAC output reader stored translation vectors from the FINAL POINT block into a fi

CVE-2022-46292 [HIGH] CWE-787 Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION) Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION) ### Summary A memory-safety vulnerability in Open Babel's MOPAC output parser allowed an out-of-bounds write into the `translationVectors[]` array when reading the "UNIT CELL TRANSLATION" block of a crafted input file. ### Details The MOPAC output reader stored translation vectors from t

CVE-2022-46295 [HIGH] CWE-119 Open Babel has out-of-bounds write in MSI translationVectors[] Open Babel has out-of-bounds write in MSI translationVectors[] ### Summary A memory-safety vulnerability in Open Babel's MSI parser allowed an out-of-bounds write into the `translationVectors[]` array when reading a crafted input file. ### Details The MSI reader stored cell translation vectors into a fixed-size `translationVectors[]` array. A malformed input could push more vectors than the array had

CVE-2022-46294 [HIGH] CWE-119 Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom) Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom) ### Summary A memory-safety vulnerability in Open Babel's MOPAC input parser allowed an out-of-bounds write into the `translationVectors[]` array when reading Tv (translation-vector) atoms from a crafted input file. ### Details The MOPAC IN reader stored Tv-atom translation vectors into a fixed-size `translat

CVE-2022-46290 [HIGH] CWE-122 Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant) Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant) ### Summary A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file. ### Details A second variant of the `nAtoms` out-of-bounds write in the ORCA reader: a different malformed-input path produced the same class of write past the end of the destination

CVE-2022-46289 [HIGH] CWE-122 Open Babel has out-of-bounds write in ORCA nAtoms parser Open Babel has out-of-bounds write in ORCA nAtoms parser ### Summary A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file. ### Details The flaw was in the `nAtoms` handling of the ORCA reader. A malformed input caused the parser to write past the end of its destination buffer. ### Impact Open Babel is a C++ library and CLI used to read

CVE-2022-46291 [HIGH] CWE-119 Open Babel has out-of-bounds write in Gaussian translationVectors[] Open Babel has out-of-bounds write in Gaussian translationVectors[] ### Summary A memory-safety vulnerability in Open Babel's Gaussian output parser allowed an out-of-bounds write into the `translationVectors[]` array when reading a crafted input file. ### Details The Gaussian reader stored periodic-cell translation vectors into a fixed-size `translationVectors[]` array. A malformed input could

CVE-2022-46280 [HIGH] CWE-824 Open Babel has uninitialized pointer dereference in PQS pFormat Open Babel has uninitialized pointer dereference in PQS pFormat ### Summary A memory-safety vulnerability in Open Babel's PQS parser caused an uninitialized pointer dereference when reading a crafted input file. ### Details The flaw was in the `pFormat` handling of the PQS reader. A malformed input caused the parser to dereference a format pointer that had never been initialized. ### Impact Open B

CVE-2022-43467 [HIGH] CWE-119 Open Babel has out-of-bounds write in PQS coord_file parser Open Babel has out-of-bounds write in PQS coord_file parser ### Summary A memory-safety vulnerability in Open Babel's PQS parser allowed an out-of-bounds write when reading a crafted input file. ### Details The flaw was in the `coord_file` parsing path of the PQS reader. A malformed coord file specifier caused the parser to write past the end of its destination buffer. ### Impact Open Babel is a C++ l

CVE-2022-42885 [HIGH] CWE-824 Open Babel has uninitialized pointer dereference in GRO residue parser Open Babel has uninitialized pointer dereference in GRO residue parser ### Summary A memory-safety vulnerability in Open Babel's GRO parser caused an uninitialized pointer dereference when reading a crafted input file. ### Details The flaw was in the residue handling of the GRO reader. A malformed record caused the parser to use a residue pointer that had never been initialized. ### Impact

CVE-2022-44451 [HIGH] CWE-824 Open Babel has uninitialized pointer dereference in MSI atom parser Open Babel has uninitialized pointer dereference in MSI atom parser ### Summary A memory-safety vulnerability in Open Babel's MSI parser caused an uninitialized pointer dereference when reading a crafted input file. ### Details The flaw was in the atom handling of the MSI reader. A malformed record caused the parser to dereference an atom pointer that had never been initialized. ### Impact Ope

CVE-2022-41793 [HIGH] CWE-120 Open Babel has out-of-bounds write in CSR PadString (title field) Open Babel has out-of-bounds write in CSR PadString (title field) ### Summary A memory-safety vulnerability in Open Babel's CSR parser allowed an out-of-bounds write when reading a crafted input file. ### Details The flaw was in the `PadString` helper used to handle the CSR title field. A title longer than the fixed destination buffer caused the parser to write past the end of the buffer. ### Imp

CVE-2022-43607 [HIGH] CWE-119 Open Babel has out-of-bounds write in MOL2 attribute/value parser Open Babel has out-of-bounds write in MOL2 attribute/value parser ### Summary A memory-safety vulnerability in Open Babel's MOL2 parser allowed an out-of-bounds write when reading a crafted input file. ### Details The flaw was in the attribute/value parsing path of the MOL2 reader. An over-long attribute or value caused the parser to write past the end of a fixed-size destination buffer. ### Impa

CVE-2022-37331 [HIGH] CWE-119 Open Babel has out-of-bounds write in Gaussian coords_type orientation parser Open Babel has out-of-bounds write in Gaussian coords_type orientation parser ### Summary A memory-safety vulnerability in Open Babel's Gaussian output parser allowed an out-of-bounds write when reading a crafted input file. ### Details The flaw was in the `coords_type` orientation parser inside the Gaussian output reader. A malformed orientation block caused the parser to write past t