Debian Openbabel vulnerabilities

CVE-2026-3408 [LOW] CWE-476 Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence ### Summary A memory-safety vulnerability in Open Babel's CDXML file format parser caused a NULL pointer dereference when reading a crafted input file. ### Details The flaw was in `OBAtom::GetExplicitValence` as called from the CDXML parser. A malformed fragment caused the parser to invoke the method on a NULL

CVE-2025-10998 [LOW] CWE-404 Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines ### Summary A memory-safety vulnerability in Open Babel's ChemKin parser caused a NULL pointer dereference when reading a crafted input file. ### Details The flaw was in `ChemKinFormat::ReadReactionQualifierLines`. A malformed reaction qualifier record caused the parser to dereference a NULL poin

CVE-2025-10999 [MEDIUM] CWE-404 Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt ### Summary A memory-safety vulnerability in Open Babel's CACAO parser caused a NULL pointer dereference when reading a crafted input file. ### Details The flaw was in `CacaoFormat::SetHilderbrandt`. A malformed input caused the parser to dereference a NULL pointer while applying the Hilderbrandt transforma

CVE-2025-11000 [MEDIUM] CWE-125 Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read) Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read) ### Summary A memory-safety vulnerability in Open Babel's PQS parser caused an out-of-bounds (pre-buffer) read when reading a crafted input file. ### Details The flaw was in the `lowerit` helper used by the PQS parser. A malformed input caused the helper to read one or more bytes before the start of its input buffer. ### Impact