Open Babel has uninitialized pointer dereference in PQS pFormat
A memory-safety vulnerability in Open Babel's PQS parser caused an uninitialized pointer dereference when reading a crafted input file.
Advisories for Pypi/Openbabel package
2026
Open Babel has uninitialized pointer dereference in MSI atom parser
A memory-safety vulnerability in Open Babel's MSI parser caused an uninitialized pointer dereference when reading a crafted input file.
Open Babel has uninitialized pointer dereference in GRO residue parser
A memory-safety vulnerability in Open Babel's GRO parser caused an uninitialized pointer dereference when reading a crafted input file.
Open Babel has out-of-bounds write in PQS coord_file parser
A memory-safety vulnerability in Open Babel's PQS parser allowed an out-of-bounds write when reading a crafted input file.
Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)
A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file.
Open Babel has out-of-bounds write in ORCA nAtoms parser
A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file.
Open Babel has out-of-bounds write in MSI translationVectors[]
A memory-safety vulnerability in Open Babel's MSI parser allowed an out-of-bounds write into the translationVectors[] array when reading a crafted input file.
Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)
A memory-safety vulnerability in Open Babel's MOPAC output parser allowed an out-of-bounds write into the translationVectors[] array when reading the "FINAL POINT" block of a crafted input file.
Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
A memory-safety vulnerability in Open Babel's MOPAC input parser allowed an out-of-bounds write into the translationVectors[] array when reading Tv (translation-vector) atoms from a crafted input file.
Open Babel has out-of-bounds write in MOL2 attribute/value parser
A memory-safety vulnerability in Open Babel's MOL2 parser allowed an out-of-bounds write when reading a crafted input file.
Open Babel has out-of-bounds write in Gaussian translationVectors[]
A memory-safety vulnerability in Open Babel's Gaussian output parser allowed an out-of-bounds write into the translationVectors[] array when reading a crafted input file.
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
A memory-safety vulnerability in Open Babel's Gaussian output parser allowed an out-of-bounds write when reading a crafted input file.
Open Babel has out-of-bounds write in CSR PadString (title field)
A memory-safety vulnerability in Open Babel's CSR parser allowed an out-of-bounds write when reading a crafted input file.
Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
A memory-safety vulnerability in Open Babel's PQS parser caused an out-of-bounds (pre-buffer) read when reading a crafted input file.
Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines
A memory-safety vulnerability in Open Babel's ChemKin parser caused a NULL pointer dereference when reading a crafted input file.
Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt
A memory-safety vulnerability in Open Babel's CACAO parser caused a NULL pointer dereference when reading a crafted input file.
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
A memory-safety vulnerability in Open Babel's ChemKin parser caused a heap buffer overflow when reading a crafted input file.
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
A memory-safety vulnerability in Open Babel's GAMESS output parser caused a use-after-free when reading a crafted input file.
Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
A memory-safety vulnerability in Open Babel's bundled zipstream decompression code caused an out-of-bounds write via overlapping memcpy when reading a crafted gzip-compressed chemistry file.
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
A memory-safety vulnerability in Open Babel's MOL2 file format parser caused a NULL pointer dereference when reading a crafted input file.
Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
A memory-safety vulnerability in Open Babel's SMILES parser caused a heap buffer overflow when reading a crafted input string.
Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Summary A memory-safety vulnerability in Open Babel's CIF file format parser allowed an out-of-bounds read when reading a crafted input file. Details The flaw was in OpenBabel::transform3d::DescribeAsString. A malformed symmetry-operation string caused the parser to read past the end of its internal buffer while formatting the description. Impact Open Babel is a C++ library and CLI used to read and write chemistry file formats; it is shipped by Linux distributions …
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
A memory-safety vulnerability in Open Babel's CDXML file format parser caused a NULL pointer dereference when reading a crafted input file.