Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe analysis of the provided patch e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a reveals three separate vulnerabilities that were fixed in Open Babel. The primary vulnerability mentioned in the advisory is a NULL pointer dereference within the CDXML file handler. This issue is located in the OpenBabel::ChemDrawXMLFormat::EndElement function, where the code failed to check if _pmol->GetAtom() returned a valid pointer before using it. A malicious CDXML file could exploit this to cause a denial of service.
The same commit also addresses two other security flaws:
OpenBabel::ReadMolecule function for the MOL2 file format. An invalid atom ID in a MOL2 file could cause mol.GetAtom() to return NULL, leading to a crash when SetFormalCharge is called.OpenBabel::transform3d::DescribeAsString. A specially crafted matrix could cause a loop to read beyond its intended boundaries, resulting in a crash.All three functions are considered vulnerable as they process external input without proper validation, leading to crashes.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openbabel | pip | < 3.2.0 | 3.2.0 |