Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openbabel | pip | < 3.2.0 | 3.2.0 |
Miggo AIRoot Cause AnalysisThe vulnerability, identified as CVE-2022-43467, is an out-of-bounds write in the PQS file format parser of Open Babel. The analysis of the provided patch commit 2a7d2cda8bd47daade2e555e34b69651a2e132ef pinpoints the exact location of the flaw. The changes are in the src/formats/PQSformat.cpp file, specifically within the OpenBabel::PQSFormat::ReadMolecule method. The vulnerability is caused by the use of the strcat function, which does not perform bounds checking, to append a filename from the PQS file to an internal buffer. This could be exploited by a crafted PQS file with an overly long filename in the geom file= directive, causing a buffer overflow. The patch mitigates this by replacing strcat with the safer strncat alternative, which respects the buffer's boundaries. Therefore, the OpenBabel::PQSFormat::ReadMolecule function is the vulnerable function that would appear in a runtime profile during exploitation.
