CVE-2022-46280

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 and prior to the version that includes the fix for this issue

Description A use of uninitialized pointer issue exists in the PQS format pFormat functionality. This can be exploited by providing a specially crafted malformed file, potentially leading to arbitrary code execution. An attacker can trigger this issue by providing a malicious file.

Recommendations For Open Babel version 3.1.1, update to a version that includes the fix for this issue. For versions prior to the fixed version, consider restricting the use of the PQS format pFormat functionality until a patch is available.