9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2022-42885

CVE-2022-42885: Open Babel has uninitialized pointer dereference in GRO residue parser

A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2022-42885

CVE-2022-42885:

9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable YesTech Impact Total

Select your environment

→SSVCScheduled60 days

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openbabel	pip	< 3.2.0	3.2.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, CVE-2022-42885, is an uninitialized pointer dereference in the Open Babel GRO format handler. The provided commit fa9a2d9a2eb75154b7a884dfe679ff41a8f9c547 directly addresses this issue. Analysis of the commit's changes to src/formats/groformat.cpp reveals the vulnerable function to be OpenBabel::GROFormat::WriteMolecule. Before the patch, the OBResidue* res pointer was not initialized and was subsequently used without a null check after being assigned the result of atom->GetResidue(). If a molecule was processed that had no residue information (e.g., when converting from a format like XYZ), GetResidue() would return a null pointer. The subsequent calls to res->GetNum(), res->GetName(), and res->GetAtomID() would then cause a null pointer dereference, leading to a program crash. The patch rectifies this by initializing res to nullptr and adding checks to ensure it is not null before any dereferencing occurs. Therefore, any runtime profile during the exploitation of this vulnerability would show OpenBabel::GROFormat::WriteMolecule in the stack trace.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.