Multiple out-of-bounds write vulnerabilities exist in the... · CVE-2022-46289 · GitHub Advisory Database · GitHub

Multiple out-of-bounds write vulnerabilities exist in the...

High severity Unreviewed Published Jul 21, 2023 to the GitHub Advisory Database • Updated Apr 11, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.nAtoms calculation wrap-around, leading to a small buffer allocation

References

Published by the National Vulnerability Database

Jul 21, 2023

Published to the GitHub Advisory Database Jul 21, 2023

Last updated Apr 11, 2024

Weaknesses

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Learn more on MITRE.

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer. Learn more on MITRE.