Out-of-Bounds Write Vulnerability in Open Babel Affects File Processing
CVE-2022-37331

7.3HIGH

Key Information:

Vendor

Open Babel

Status
Open Babel
Vendor
CVE Published:
21 July 2023

What is CVE-2022-37331?

An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel that allows an attacker to exploit specially crafted malformed files. This flaw can lead to potential arbitrary code execution, posing a significant security threat. By delivering a malicious file, attackers can exploit this vulnerability, making it crucial for users to ensure their software is updated and secure against such risks.

Affected Version(s)

Open Babel 3.1.1

Open Babel master commit 530dbfa3

References

https://talosintelligence.com/vulnerability_reports/TALOS...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by Claudio Bozzato of Cisco Talos.
.