CVE-2022-43467CWE-119

An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3

Critical · published July 21, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds write vulnerability is lurking in Open Babel 3.1.1 — imagine a rogue file that could make your code run wild! 🔥 Think of it like a waiter who serves a dish that wasn't even on the menu. Instead of delivering the correct meal, they bring something completely unexpected, potentially ruining the whole dinner party. With this vulnerability, an attacker could slip in a malformed file, potentially leading to arbitrary code execution. That means they could take control of your system, possibly stealing sensitive data or executing harmful commands. It’s a serious breach that could wreak havoc!

Put simply

Think of it like a waiter who serves a dish that wasn't even on the menu. Instead of delivering the correct meal, they bring something completely unexpected, potentially ruining the whole dinner party. This out-of-bounds write flaw allows attackers to send a specially crafted file to Open Babel, causing the application to write data outside its intended memory space, which can result in arbitrary code execution.

What to do

With this vulnerability, an attacker could slip in a malformed file, potentially leading to arbitrary code execution. That means they could take control of your system, possibly stealing sensitive data or executing harmful commands. It’s a serious breach that could wreak havoc! Immediately patch your Open Babel installation to version 3.1.2 or later to close this vulnerability. Make sure to review any file-handling processes in your application for additional security measures. And remember, always validate file inputs! You’ve got this! Follow these steps and you’ll secure your system in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00828 · 57.1th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2023-07-21T20:25Z
EPSS history
Timeline
  • 21 JUL 20:25Z
    An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3
    cvelistv5