Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openbabel | pip | < 3.2.0 | 3.2.0 |
Miggo AIRoot Cause AnalysisThe vulnerability is an out-of-bounds write caused by parsing specially crafted chemistry files. The root cause is the use of a fixed-size stack array translationVectors (of size 3) to store translation vectors read from input files without proper bounds checking. The provided patch addresses this issue across multiple file format parsers (Gaussian, MOPAC, and MSI) by adding a condition if (numTranslationVectors < 3) before writing to the array. This prevents more than three vectors from being written, thus mitigating the buffer overflow. The primary vulnerable function for the specified CVE-2022-46291 is OpenBabel::GaussianOutputFormat::ReadMolecule. However, the same commit fixes identical vulnerabilities in other parsers, which are also included in the analysis as they are part of the same underlying flaw and patch.
