Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openbabel | pip | < 3.2.0 | 3.2.0 |
Miggo AIRoot Cause AnalysisThe vulnerability, identified as CVE-2022-44451, is an uninitialized pointer dereference in the MSI file format parser of Open Babel. The analysis of the provided patch commit fa9a2d9a2eb75154b7a884dfe679ff41a8f9c547 clearly points to the vulnerable function. The changes in src/formats/msiformat.cpp are confined to the OpenBabel::MSIFormat::ReadMolecule function. The vulnerability existed because the OBAtom *atom pointer was used without being initialized under specific circumstances in a malformed MSI file. The patch addresses this by initializing atom to nullptr and adding a null check before it is used, thus preventing the dereference of an uninitialized pointer. The commit message and the associated test cases confirm that this change directly addresses the vulnerability.
