Out-of-bounds Write The advisory has been revoked - it doesn't affect any version of package openbabel  (opens in a new tab)


Threat Intelligence

EPSS
0.85% (55th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU2510-OPENBABEL-15022908
  • published17 Jan 2026
  • disclosed21 Jul 2023

Introduced: 21 Jul 2023

CVE-2022-46294  (opens in a new tab)
CWE-787  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:25.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream openbabel package and not the openbabel package as distributed by Ubuntu.

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC Cartesian file format