CVE-2026-2705

Katalog CVE

CVSS 8.1 · High EPSS 0,79%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada openbabel open babel. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was detected in Open Babel up to 3.1.1. The impacted element is the function OBAtom::SetFormalCharge in the library include/openbabel/atom.h of the component MOL2 File Handler. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The patch is identified as e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. A patch should be applied to remediate this issue. The project was informed of the problem early through an issue report but has not responded yet.

Rincian

Terbit di NVD

19 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,79% peluang dieksploitasi; lebih tinggi dari 55,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.346651 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.754379 advisory pihak ketiga · vdb entry
• https://github.com/oneafter/0128/blob/main/ob2/repro.mol2 exploit
• https://github.com/openbabel/openbabel/issues/2848 exploit · issue tracking
• https://github.com/VedantMadane/openbabel/commit/e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a
• https://github.com/openbabel/openbabel/pull/2862
• https://vuldb.com/?ctiid.346651 permissions required · vdb entry