{"id":"CVE-2026-3408","aliases":["DEBIAN-CVE-2026-3408","EUVD-2026-9141","GHSA-fg6r-xgp8-x64r","GHSA-rxpr-wq63-jr7p","PYSEC-2026-2791","UBUNTU-CVE-2026-3408","openSUSE-SU-2026:11096-1","openSUSE-SU-2026:21190-1"],"status":"published","title":"Open Babel CDXML File atom.cpp GetExplicitValence null pointer dereference","description":"A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue.","severity":{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00558,"percentile":0.46763,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-404","CWE-476","CWE-787"],"published":"2026-03-02T03:32:10Z","modified":"2026-11-07T01:00:06Z","fixes":[{"ecosystem":"PyPI","package":"openbabel","fixed_in":["3.2.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:14","package":"openbabel","fixed_in":["3.2.0+dfsg-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-10","3.1.1+dfsg-11","3.1.1+dfsg-12","3.1.1+dfsg-13","3.1.1+dfsg-14","3.1.1+dfsg-15~exp","3.1.1+dfsg-9","3.2.0+dfsg-1","3.2.0+dfsg-1~exp","3.2.0+dfsg-2"]},{"source":"osv","ecosystem":"Debian:13","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-12","3.1.1+dfsg-13","3.1.1+dfsg-14","3.1.1+dfsg-15~exp","3.2.0+dfsg-1","3.2.0+dfsg-1~exp","3.2.0+dfsg-2"]},{"source":"osv","ecosystem":"Debian:14","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0+dfsg-1"}]}],"versions":["3.1.1+dfsg-12","3.1.1+dfsg-13","3.1.1+dfsg-14","3.1.1+dfsg-15~exp","3.2.0+dfsg-1~exp"]},{"source":"osv","ecosystem":"PyPI","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0"}]}],"versions":["1.8","1.8.1","1.8.2","1.8.3","1.8.4","2.4.0","2.4.1","3.0.0","3.0.0a1","3.1.1","3.1.1.1"]},{"source":"osv","ecosystem":"PyPI","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0"}]}],"versions":["1.8","1.8.1","1.8.2","1.8.3","1.8.4","2.4.0","2.4.1","3.0.0","3.0.0a1","3.1.1","3.1.1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2+dfsg-2.2","2.3.2+dfsg-2.2build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.1+dfsg-3","2.4.1+dfsg-3build1","2.4.1+dfsg-5.1","2.4.1+dfsg-6","3.0.0+dfsg-3","3.0.0+dfsg-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-6ubuntu1","3.1.1+dfsg-6ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-9build2","3.1.1+dfsg-9ubuntu1","3.1.1+dfsg-9ubuntu2","3.1.1+dfsg-9ubuntu4","3.1.1+dfsg-9ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-11ubuntu3","3.1.1+dfsg-11ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-11ubuntu5","3.1.1+dfsg-14ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-11ubuntu4","3.1.1+dfsg-11ubuntu5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-bp160.1.1"}]}],"bundled":23}],"products":[{"vendor":"openbabel","product":"open_babel"}],"references":[{"url":"https://vuldb.com/?id.348303","tags":["vdb-entry","technical-description","Third Party Advisory","VDB Entry","advisory","web","report"]},{"url":"https://vuldb.com/?ctiid.348303","tags":["signature","permissions-required","Permissions Required","VDB Entry","report","web"]},{"url":"https://vuldb.com/?submit.763756","tags":["third-party-advisory","Third Party Advisory","VDB Entry","advisory","web","report"]},{"url":"https://github.com/openbabel/openbabel/issues/2848","tags":["issue-tracking","Exploit","Issue Tracking","report","web"]},{"url":"https://github.com/openbabel/openbabel/pull/2862","tags":["issue-tracking","patch","Issue Tracking","fix","web","report"]},{"url":"https://github.com/oneafter/0128/blob/main/ob3/repro.cdxml","tags":["exploit","Issue Tracking","evidence","web","report"]},{"url":"https://github.com/VedantMadane/openbabel/commit/e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a","tags":["patch","Patch","fix","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3408","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fg6r-xgp8-x64r"},{"url":"https://github.com/openbabel/openbabel/security/advisories/GHSA-rxpr-wq63-jr7p","tags":["web"]},{"url":"https://github.com/advisories/GHSA-rxpr-wq63-jr7p","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3408.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-3408","tags":["advisory"]},{"url":"https://github.com/openbabel/openbabel","tags":["package"]},{"url":"https://pypi.org/project/openbabel","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2026-3408","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3408","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3408","tags":["web"]},{"url":"https://bugzilla.suse.com/1217676","tags":["report"]},{"url":"https://bugzilla.suse.com/1258501","tags":["report"]},{"url":"https://bugzilla.suse.com/1258507","tags":["report"]},{"url":"https://bugzilla.suse.com/1259041","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-43467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-43607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2705","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-3408","title":"Open Babel CDXML File atom.cpp GetExplicitValence null pointer dereference","description":"A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2026-03-02T03:32:10.76Z","modified":"2026-03-02T14:39:26.476Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","level":"medium","assessor":"cna"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","level":"medium","assessor":"cna"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C","assessor":"cna"}],"cwes":["CWE-476","CWE-404"],"updated_at":"2026-11-02T13:48:58.05327Z"}],"euvd":[{"id":"EUVD-2026-9141","description":"A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2026-03-02T03:32:10Z","modified":"2026-03-02T14:39:26Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"updated_at":"2026-11-02T19:48:13.147525Z"}],"ghsa":[{"id":"GHSA-fg6r-xgp8-x64r","title":"Duplicate Advisory: Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence","description":"## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-rxpr-wq63-jr7p. This link is maintained to preserve external references.\n\n## Original Description\nA vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue.","status":"withdrawn","published":"2026-03-02T06:32:01Z","modified":"2026-06-30T18:47:22Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-404","CWE-787"],"updated_at":"2026-11-02T14:40:35.701766Z"},{"id":"GHSA-rxpr-wq63-jr7p","title":"Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence","description":"### Summary\n\nA memory-safety vulnerability in Open Babel's CDXML file format parser\ncaused a NULL pointer dereference when reading a crafted input file.\n\n### Details\n\nThe flaw was in `OBAtom::GetExplicitValence` as called from the CDXML\nparser. A malformed fragment caused the parser to invoke the method\non a NULL atom pointer.\n\n### Impact\n\nOpen Babel is a C++ library and CLI used to read and write chemistry\nfile formats; it is shipped by Linux distributions and embedded in\nservices that may parse untrusted input. Triggering this vulnerability\nrequires the victim to open a malicious CDXML file with the `obabel`\ntool, the `OBConversion` API, or any of the language bindings (Python,\nRuby, Java, R, Perl, C#, PHP).\n\n### Affected versions\n\nAll releases up to and including 3.1.1.\n\n### Patched version\n\n3.2.0 (released 2026-05-26).\n\n### Patch\n\nFix commit: https://github.com/openbabel/openbabel/commit/e23a224b\nTracked in #2862.\n\nA minimized reproducer for this CVE is checked in under\n`test/files/fuzz_regress/` and is exercised on every CI build under\nASAN+UBSAN by the `fuzzregresstest` harness.\n\n### Credit\n\nReported by Vedant Madane (@VedantMadane) via VulDB.","status":"published","published":"2026-06-30T18:47:28Z","modified":"2026-06-30T18:47:30Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:40:35.701766Z"}],"nvd":[{"id":"CVE-2026-3408","description":"A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2026-03-02T04:16:06.023Z","modified":"2026-06-17T10:43:33.38Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"secondary"}],"cwes":["CWE-404","CWE-476","CWE-787"],"updated_at":"2026-11-02T14:12:07.420927Z"}],"osv":[{"id":"CVE-2026-3408","title":"Open Babel CDXML File atom.cpp GetExplicitValence null pointer dereference","description":"A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2026-03-02T03:32:10.76Z","modified":"2026-10-28T10:49:31.593471561Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"cwes":["CWE-404","CWE-476"],"updated_at":"2026-11-02T15:45:02.247031Z"},{"id":"DEBIAN-CVE-2026-3408","description":"A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2026-03-02T04:16:06.023Z","modified":"2026-11-07T01:00:06.315033339Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T01:26:17.791146Z"},{"id":"GHSA-fg6r-xgp8-x64r","title":"Duplicate Advisory: Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence","description":"## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-rxpr-wq63-jr7p. This link is maintained to preserve external references.\n\n## Original Description\nA vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue.","status":"withdrawn","published":"2026-03-02T06:32:01Z","modified":"2026-06-30T19:00:32.317312329Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"},{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"}],"cwes":["CWE-404","CWE-787"],"updated_at":"2026-11-02T15:46:46.39441Z"},{"id":"GHSA-rxpr-wq63-jr7p","title":"Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence","description":"### Summary\n\nA memory-safety vulnerability in Open Babel's CDXML file format parser\ncaused a NULL pointer dereference when reading a crafted input file.\n\n### Details\n\nThe flaw was in `OBAtom::GetExplicitValence` as called from the CDXML\nparser. A malformed fragment caused the parser to invoke the method\non a NULL atom pointer.\n\n### Impact\n\nOpen Babel is a C++ library and CLI used to read and write chemistry\nfile formats; it is shipped by Linux distributions and embedded in\nservices that may parse untrusted input. Triggering this vulnerability\nrequires the victim to open a malicious CDXML file with the `obabel`\ntool, the `OBConversion` API, or any of the language bindings (Python,\nRuby, Java, R, Perl, C#, PHP).\n\n### Affected versions\n\nAll releases up to and including 3.1.1.\n\n### Patched version\n\n3.2.0 (released 2026-05-26).\n\n### Patch\n\nFix commit: https://github.com/openbabel/openbabel/commit/e23a224b\nTracked in #2862.\n\nA minimized reproducer for this CVE is checked in under\n`test/files/fuzz_regress/` and is exercised on every CI build under\nASAN+UBSAN by the `fuzzregresstest` harness.\n\n### Credit\n\nReported by Vedant Madane (@VedantMadane) via VulDB.","status":"published","published":"2026-06-30T18:47:28Z","modified":"2026-07-13T16:42:34.646090639Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:46:56.639206Z"},{"id":"PYSEC-2026-2791","title":"Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence","description":"### Summary\n\nA memory-safety vulnerability in Open Babel's CDXML file format parser\ncaused a NULL pointer dereference when reading a crafted input file.\n\n### Details\n\nThe flaw was in `OBAtom::GetExplicitValence` as called from the CDXML\nparser. A malformed fragment caused the parser to invoke the method\non a NULL atom pointer.\n\n### Impact\n\nOpen Babel is a C++ library and CLI used to read and write chemistry\nfile formats; it is shipped by Linux distributions and embedded in\nservices that may parse untrusted input. Triggering this vulnerability\nrequires the victim to open a malicious CDXML file with the `obabel`\ntool, the `OBConversion` API, or any of the language bindings (Python,\nRuby, Java, R, Perl, C#, PHP).\n\n### Affected versions\n\nAll releases up to and including 3.1.1.\n\n### Patched version\n\n3.2.0 (released 2026-05-26).\n\n### Patch\n\nFix commit: https://github.com/openbabel/openbabel/commit/e23a224b\nTracked in #2862.\n\nA minimized reproducer for this CVE is checked in under\n`test/files/fuzz_regress/` and is exercised on every CI build under\nASAN+UBSAN by the `fuzzregresstest` harness.\n\n### Credit\n\nReported by Vedant Madane (@VedantMadane) via VulDB.","status":"published","published":"2026-07-13T15:46:25.400561Z","modified":"2026-07-13T16:32:26.300440085Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"UBUNTU-CVE-2026-3408","description":"A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2026-03-02T04:16:00Z","modified":"2026-10-17T12:58:11.954112906Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"updated_at":"2026-11-02T16:56:16.036833Z"},{"id":"openSUSE-SU-2026:11096-1","title":"libopenbabel8-3.2.0-2.1 on GA media","description":"These are all security issues fixed in the libopenbabel8-3.2.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-22T00:00:00Z","modified":"2026-06-24T09:00:22.407486099Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21190-1","title":"Security update for openbabel","description":"This update for openbabel fixes the following issues:\n\nChanges in openbabel:\n\n- Update to version 3.2.0:\n  * Add an L-BFGS optimizer, used by default for gen3d and\n    conformer searches\n  * New macrocycle ring builder (Dale codes) for better initial\n    3D geometry of large rings\n  * Add KET (Ketcher JSON) and ChemicalJSON (.cjson) format\n    support\n  * Drop Python 2 support; Python 3.13 supported\n  * Faster, vectorized distance-geometry implementation\n  * Full CMake 4 compatibility and modernized build\n  * Backwards compatible with 3.0 and 3.1\n  * Fix many crash and memory-safety bugs found via OSS-Fuzz\n    and TALOS, including the following security issues:\n    CVE-2022-37331 (boo#1217676), CVE-2022-41793, CVE-2022-42885,\n    CVE-2022-43467, CVE-2022-43607, CVE-2022-44451,\n    CVE-2022-46280, CVE-2022-46289, CVE-2022-46290,\n    CVE-2022-46291, CVE-2022-46292, CVE-2022-46294,\n    CVE-2022-46295, CVE-2025-10994, CVE-2025-10995,\n    CVE-2025-10996, CVE-2025-10997, CVE-2025-10998,\n    CVE-2025-10999, CVE-2025-11000,\n    CVE-2026-2704 (boo#1258501), CVE-2026-2705 (boo#1258507) and\n    CVE-2026-3408 (boo#1259041)\n","status":"published","published":"2026-07-01T09:21:23Z","modified":"2026-07-03T18:24:23.69365859Z","updated_at":"2026-11-02T16:58:41.885092Z"}]}}