Every CVE Search/ Get API key

OSV-2022-1288

Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376787368

Crash type: Stack-buffer-overflow READ 1
Crash state:
bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>
bool SmilesParseOps::parser::parse_it<std::__1::__wrap_iter<char const*> >
SmilesParseOps::parseCXExtensions

What each source reports

OSV No score

Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376787368

Crash type: Stack-buffer-overflow READ 1
Crash state:
bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>
bool SmilesParseOps::parser::parse_it<std::__1::__wrap_iter<char const*> >
SmilesParseOps::parseCXExtensions
Record
OSV-2022-1288
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
rdkit
OSS-Fuzz
Listed versions, plus commit ranges
Release_2022_03_1Release_2022_03_1b1Release_2022_03_2Release_2022_03_3Release_2022_03_4
Show 45 moreShow less
Release_2022_03_5Release_2022_09_1Release_2022_09_1b1Release_2022_09_2Release_2022_09_3Release_2022_09_4Release_2022_09_5Release_2023_03_1Release_2023_03_1b1Release_2023_03_2Release_2023_03_3Release_2023_09_1Release_2023_09_1b1Release_2023_09_2Release_2023_09_3Release_2023_09_4Release_2023_09_5Release_2023_09_6Release_2024_03_1Release_2024_03_1b1Release_2024_03_2Release_2024_03_3Release_2024_03_4Release_2024_03_5Release_2024_03_6Release_2024_09_1Release_2024_09_1b1Release_2024_09_2Release_2024_09_3Release_2024_09_4Release_2024_09_5Release_2024_09_6Release_2025_03_1Release_2025_03_1b1Release_2025_03_2Release_2025_03_3Release_2025_03_4Release_2025_03_5Release_2025_03_6Release_2025_09_1Release_2025_09_1b1Release_2025_09_2Release_2025_09_3Release_2025_09_4Release_2025_09_5
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-1288 is a vulnerability with no CVSS score yet in rdkit, published November 4, 2024. No source lists public exploit code. A source reports a fix.

References

This page doesn't list everything

Left out here: 5 versions. The JSON record has them.

MoveEnter Open