CVE-2022-46293

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 and master commit 530dbfa3

Description The issue is related to out-of-bounds write vulnerabilities in the translationVectors parsing functionality, which can be triggered by a specially-crafted malformed file. This can lead to arbitrary code execution. The vulnerability affects the MOPAC file format, specifically inside the Final Point and Derivatives section. An attacker can exploit this by providing a malicious file.

Recommendations For Open Babel version 3.1.1, consider disabling the translationVectors parsing functionality until a patch is available. For Open Babel master commit 530dbfa3, restrict access to the MOPAC file format to minimize the risk of exploitation. Avoid using the translationVectors parsing functionality in the affected formats until the issue is resolved.