Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openbabel | pip | < 3.2.0 | 3.2.0 |
Miggo AIRoot Cause AnalysisThe analysis of the provided patch commit b239d06eb724bb684eea0040e9d87cf07072b081 clearly indicates that the vulnerability lies within the src/formats/orcaformat.cpp file. The changes in this file are confined to the OpenBabel::OrcaFormat::ReadMolecule function. The core of the vulnerability is an out-of-bounds write due to insufficient validation of the nAtoms value read from the ORCA file header. A malicious actor could craft a file with a header that understates the actual number of atoms, causing the program to allocate an insufficiently sized buffer. When the function later iterates through the atom coordinates, it attempts to write past the end of this buffer. The patch rectifies this by adding a bounds check (if (confCoords != nullptr && i < nAtoms)) before the write operation, thus preventing the buffer overflow. Therefore, OpenBabel::OrcaFormat::ReadMolecule is the precise function where the vulnerability is triggered.
