CVE-2022-46290

Katalog CVE

CVSS 7.8 · High EPSS 0,80%

Kerentanan Heap-based Buffer Overflow pada openbabel open babel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.The loop that stores the coordinates does not check its index against nAtoms

Rincian

Terbit di NVD

21 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,80% peluang dieksploitasi; lebih tinggi dari 55,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1665 exploit · deskripsi teknis · advisory pihak ketiga
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1665