Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openbabel | pip | < 3.2.0 | 3.2.0 |
Miggo AIRoot Cause AnalysisThe vulnerability is an out-of-bounds write in the file format parsers of Open Babel. The core of the issue lies in how several file format parsers, including MSI, MOPAC, and Gaussian, handle translation vectors. These parsers read vector data from input files and store them in a fixed-size C-style array named translationVectors, which can hold a maximum of three vectors. The vulnerability is triggered when a specially crafted input file provides more than three translation vectors. The parsing logic in the vulnerable functions, such as OpenBabel::MSIFormat::ReadMolecule, OpenBabel::MOPACFormat::ReadMolecule, and OpenBabel::GaussFormat::ReadMolecule, fails to perform the necessary bounds checks before writing to the translationVectors array. This allows data to be written past the allocated buffer, leading to a classic buffer overflow. This could be exploited to cause a crash (denial of service) or, in a more sophisticated attack, to execute arbitrary code. The patch addresses this by introducing a simple but effective check, if (numTranslationVectors < 3), before each write operation to the translationVectors array, ensuring that the array's bounds are not exceeded.
