DEBIAN-CVE-2022-46292

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/DEBIAN-CVE-2022-46292

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-46292.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2022-46292

Upstream

CVE-2022-46292

Published

2023-07-21T21:15:10Z

Modified

2025-09-18T05:18:37Z

Summary

[none]

Details

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section

References

https://security-tracker.debian.org/tracker/CVE-2022-46292

Affected packages

Debian:11 / openbabel

Package

Name: openbabel
Purl: pkg:deb/debian/openbabel?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / openbabel

Package

Name: openbabel
Purl: pkg:deb/debian/openbabel?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / openbabel

Package

Name: openbabel
Purl: pkg:deb/debian/openbabel?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / openbabel

Package

Name: openbabel
Purl: pkg:deb/debian/openbabel?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "not yet assigned"
}