Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

Open Babel SMILES Parsing Has Heap Buffer Overflow

published 1 year ago
Summary

Open Babel versions up to 3.1.1 have a vulnerability in their SMILES parsing function. This could allow an attacker to access or modify sensitive data on a local device, given they have access to the system. We recommend updating to the latest version of Open Babel to address this issue.

What to do
  • Update noel o'boyle openbabel to version 3.2.0.
Affected software
Ecosystem VendorProductAffected versions
PyPI noel o'boyle openbabel < 3.2.0
Fix: upgrade to 3.2.0
Original advisory text
Duplicate Advisory: Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
## Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-j35x-w4gj-pf7w. This link is maintained to preserve external references.

## Original Description
A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit is now public and may be used.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.9 Medium
Type
CWE-119Buffer Overflow
Timeline
Published26 Sep 2025
Updated30 Jun 2026
First seen30 Jun 2026
Sources
GHSA-9p6c-jcw8-x98f · OSV
Track software like this
Free during beta