Every CVE Search/ Get API key

OSV-2020-1849

Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25906

Crash type: Use-of-uninitialized-value
Crash state:
RDKit::SubstanceGroup::getBondType
RDKit::SubstanceGroup::addCState
RDKit::SGroupParsing::ParseSGroupV2000SBVLine

What each source reports

OSV No score

Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25906

Crash type: Use-of-uninitialized-value
Crash state:
RDKit::SubstanceGroup::getBondType
RDKit::SubstanceGroup::addCState
RDKit::SGroupParsing::ParseSGroupV2000SBVLine
Record
OSV-2020-1849
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
rdkit
OSS-Fuzz
Listed versions, plus commit ranges
Release_2020_09_1Release_2020_09_1b1Release_2020_09_2Release_2020_09_3Release_2020_09_4Release_2020_09_5Release_2021_03_1Release_2021_03_1b1
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2020-1849 is a vulnerability with no CVSS score yet in rdkit, published September 26, 2020. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open