Openbabel: Duplicate Advisory: Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
An out-of-bounds read vulnerability exists in Open Babel versions prior to 3.2.0 in the function transform3d::DescribeAsString within the CIF File Handler component. This vulnerability allows remote attackers to cause an out-of-bounds read, which may lead to information disclosure or application instability. The advisory is a duplicate and has been withdrawn in favor of another reference. No patch or fix has been confirmed yet. The vulnerability is classified as low severity.
AI Analysis
Technical Summary
Open Babel up to version 3.1.1 (and all versions prior to 3.2.0) contains a security vulnerability in the function OpenBabel::transform3d::DescribeAsString located in src/math/transform3d.cpp, part of the CIF File Handler. The vulnerability is an out-of-bounds read (CWE-119) that can be triggered remotely. The issue was reported early but the project has not responded with a fix. The advisory is a duplicate and has been withdrawn, preserving external references. No patch or remediation has been provided by the vendor as of the advisory date.
Potential Impact
The out-of-bounds read vulnerability may allow remote attackers to read memory beyond intended bounds, potentially leading to information disclosure or application crashes. The severity is assessed as low, indicating limited impact or exploitability. There are no known exploits in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch has been provided, users should monitor vendor communications for updates. Avoid processing untrusted CIF files with affected versions until a fix is available.
Openbabel: Duplicate Advisory: Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Description
An out-of-bounds read vulnerability exists in Open Babel versions prior to 3.2.0 in the function transform3d::DescribeAsString within the CIF File Handler component. This vulnerability allows remote attackers to cause an out-of-bounds read, which may lead to information disclosure or application instability. The advisory is a duplicate and has been withdrawn in favor of another reference. No patch or fix has been confirmed yet. The vulnerability is classified as low severity.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Open Babel up to version 3.1.1 (and all versions prior to 3.2.0) contains a security vulnerability in the function OpenBabel::transform3d::DescribeAsString located in src/math/transform3d.cpp, part of the CIF File Handler. The vulnerability is an out-of-bounds read (CWE-119) that can be triggered remotely. The issue was reported early but the project has not responded with a fix. The advisory is a duplicate and has been withdrawn, preserving external references. No patch or remediation has been provided by the vendor as of the advisory date.
Potential Impact
The out-of-bounds read vulnerability may allow remote attackers to read memory beyond intended bounds, potentially leading to information disclosure or application crashes. The severity is assessed as low, indicating limited impact or exploitability. There are no known exploits in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch has been provided, users should monitor vendor communications for updates. Avoid processing untrusted CIF files with affected versions until a fix is available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2m54-8m6g-qf93
- Osv Schema Version
- 1.4.0
- Ecosystems
- ["PyPI"]
- Database Specific Severity
- LOW
- Cvss Version
- 4.0
Threat ID: 6a4452e027e9c797198e1070
Added to database: 06/30/2026, 23:36:00 UTC
Last enriched: 06/30/2026, 23:46:48 UTC
Last updated: 09/07/2026, 23:32:58 UTC
Views: 40
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.