CVE-2025-10995 is a memory corruption vulnerability affecting Open Babel versions 3.1.0 and 3.1.1. The flaw resides in the function zlib_stream::basic_unzip_streambuf::underflow in the source file /src/zipstreamimpl.h. Exploitation requires local access and can lead to memory corruption. The vulnerability has been publicly disclosed, but no known exploits in the wild have been reported. The CVSS 4.0 vector indicates low attack complexity, local attack vector, and limited impact on confidentiality, integrity, and availability.

Successful exploitation can cause memory corruption on affected systems, potentially leading to application instability or crashes. The attack requires local access and low privileges, limiting the scope of impact. There is no indication of remote exploitation or elevated privileges.

No official patch or fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to Open Babel usage.