CVE-2022-46289CWE-122

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3

Critical · published July 21, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

🚨 A maliciously crafted file can send your system into a code execution tailspin! 🚀 Think of it as a recipe where the instructions mislead the chef, leading to a kitchen disaster instead of a delicious meal. In this case, a malformed file serves up unexpected code execution instead of the intended results. An attacker can leverage this out-of-bounds write vulnerability to execute arbitrary code on your system, potentially leading to total control over the environment. This could mean anything from accessing sensitive data to planting malware—absolutely devastating for any user! 🔥

Put simply

Think of it as a recipe where the instructions mislead the chef, leading to a kitchen disaster instead of a delicious meal. In this case, a malformed file serves up unexpected code execution instead of the intended results. This vulnerability arises in the ORCA format's nAtoms functionality of Open Babel 3.1.1, where a specially-crafted malformed file can cause calculation wrap-around, resulting in a small buffer allocation that can be exploited for code execution.

What to do

An attacker can leverage this out-of-bounds write vulnerability to execute arbitrary code on your system, potentially leading to total control over the environment. This could mean anything from accessing sensitive data to planting malware—absolutely devastating for any user! 🔥 To protect yourself, upgrade Open Babel to version 3.1.2 or later. It's crucial to closely inspect any files being processed by this software to ensure they're from trusted sources. Don't let a rogue file ruin your day! You've got this! Stay proactive, patch up, and you'll be on the path to security hero status! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00804 · 56.3th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2023-07-21T20:25Z
EPSS history
Timeline
  • 21 JUL 20:25Z
    Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3
    cvelistv5