CVE-2022-46294CWE-119

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master…

Critical · published July 21, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

🚨 A single malformed file is all it takes to unleash chaos! Open Babel 3.1.1 has multiple out-of-bounds write vulnerabilities that could lead to arbitrary code execution. 🔥 Think of it like a restaurant that accepts any delivery without checking the order. If someone sent a dangerously incorrect package, the kitchen would blindly prepare it, potentially contaminating every dish. That's what happens when Open Babel processes a malicious file! An attacker could exploit this vulnerability to execute arbitrary code, gaining full control of the system! This could lead to devastating consequences, from data breaches to unauthorized operations within your environment. It's like giving a stranger the keys to your car and asking them to take it for a spin—who knows where they’ll end up!

Put simply

Think of it like a restaurant that accepts any delivery without checking the order. If someone sent a dangerously incorrect package, the kitchen would blindly prepare it, potentially contaminating every dish. That's what happens when Open Babel processes a malicious file! This vulnerability arises from multiple out-of-bounds writes in the translationVectors parsing functionality, specifically with the MOPAC Cartesian file format. When a specially-crafted file is processed, it can overwrite memory locations, allowing attackers to execute their own code.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, gaining full control of the system! This could lead to devastating consequences, from data breaches to unauthorized operations within your environment. It's like giving a stranger the keys to your car and asking them to take it for a spin—who knows where they’ll end up! Immediate action is required! Patch Open Babel to the latest version to mitigate these vulnerabilities. Additionally, implement strict input validation to ensure only safe files are processed. Don't wait until it's too late! You've got this! By following these steps, you’ll keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00850 · 57.8th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2023-07-21T20:25Z
EPSS history
Timeline
  • 21 JUL 20:25Z
    Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master…
    cvelistv5