Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-46292 EUVD-2022-49110GHSA-55f6-pf8r-c2f4GHSA-hrvg-gx3j-wh53PYSEC-2026-2771

Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)

Published Jul 21, 2023 · Updated Nov 4, 2025 · Assigned by talos

Description

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section

Affected products

VendorProductAffectedFixed
Open Babel Open Babel 3.1.1, master commit 530dbfa3 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 openbabel No fix yet —
Debian 13 openbabel No fix yet —
Debian 12 openbabel No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 openbabel No fix yet —
Ubuntu 26.04 LTS openbabel No fix yet —
Ubuntu 25.10 openbabel No fix yet —
Ubuntu 24.04 LTS openbabel No fix yet —
Ubuntu 22.04 LTS openbabel No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS openbabel No fix yet —
Ubuntu 18.04 LTS openbabel No fix yet —
Ubuntu 16.04 LTS openbabel No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 openbabel 3.2.0-bp160.1.1 openSUSE-SU-2026:21190-1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI openbabel < 3.2.0 3.2.0 GHSA-55f6-pf8r-c2f4

Advisories 1

References