Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe analysis of the security advisory and the associated patch commit directly points to the vulnerable function. The vulnerability description explicitly names ChemKinFormat::ReadReactionQualifierLines as the source of the NULL pointer dereference. The provided patch af4a4212 contains changes only within this function in the file src/formats/chemkinformat.cpp. The changes involve adding boundary checks before accessing a token vector (toks) that is populated from the input file. The lack of these checks in the original code is the root cause of the vulnerability. Therefore, any exploitation of this vulnerability would necessarily involve the execution of the openbabel::ChemKinFormat::ReadReactionQualifierLines function, making it the primary indicator in a runtime profile.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openbabel | pip | < 3.2.0 | 3.2.0 |
