Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe analysis of the provided patch commit 528c142f clearly indicates two vulnerabilities were fixed. The primary vulnerability, CVE-2022-37331, is located in the OpenBabel::GaussianFormat::ReadChemObject function within src/formats/gaussformat.cpp. The patch shows the replacement of a fixed-size C-style character array (char coords_type[25]) with a C++ std::string. The vulnerable code used strncpy and strcat on this fixed-size buffer, creating a classic stack-based buffer overflow condition when parsing a malicious Gaussian file with a long orientation type. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.
The same commit also addresses a similar out-of-bounds write vulnerability (CVE-2022-41793) in the OpenBabel::PadString function in src/formats/CSRformat.cpp. The unsafe use of strncpy was replaced with a safer memcpy that includes a bounds check. Both functions process external file input and are therefore considered vulnerable entry points that would appear in a runtime profile during exploitation.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openbabel | pip | < 3.2.0 | 3.2.0 |
