Skip to main content
VulnerabilityPublished Updated

void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<cha · Heap-buffer-overflow

Affects rdkitSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 3 Aug 2026, 00:43 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzrdkitpkg:generic/rdkitOther threatsAffected
  • >=fbbddc6035d74f12edde15bf1a93fa70a3fe6fd1
  • =Release_2022_09_1
  • =Release_2022_09_1b1
  • =Release_2022_09_2
  • =Release_2022_09_3
  • =Release_2022_09_4
  • =Release_2022_09_5
  • =Release_2023_03_1b1
  • =Release_2023_03_1
  • =Release_2023_03_2
  • =Release_2023_03_3
  • =Release_2023_09_1b1
  • =Release_2023_09_1
  • =Release_2023_09_2
  • =Release_2023_09_3
  • =Release_2023_09_4
  • =Release_2023_09_5
  • =Release_2023_09_6
  • =Release_2024_03_1b1
  • =Release_2024_03_1
  • =Release_2024_03_2
  • =Release_2024_03_3
  • =Release_2024_03_4
  • =Release_2024_03_5
  • =Release_2024_03_6
  • =Release_2024_09_1b1
  • =Release_2024_09_1
  • =Release_2024_09_2
  • =Release_2024_09_3
  • =Release_2024_09_4
  • =Release_2024_09_5
  • =Release_2024_09_6
  • =Release_2025_03_1b1
  • =Release_2025_03_1
  • =Release_2025_03_2
  • =Release_2025_03_3
  • =Release_2025_03_4
  • =Release_2025_03_5
  • =Release_2025_03_6
  • =Release_2025_09_1b1
  • =Release_2025_09_1
  • =Release_2025_09_2
  • =Release_2025_09_3
  • =Release_2025_09_4
  • =Release_2025_09_5
  • =Release_2025_09_6
  • =Release_2026_031b1
  • =Release_2026_03_1
  • =Release_2026_03_2
  • =Release_2026_03_3
  • =Release_2026_03_4
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, users should consider avoiding processing untrusted V3000 atom block data or apply additional input validation if possible.

Description

A heap-buffer-overflow vulnerability exists in the RDKit library within the function ParseV3000AtomProps, as reported by OSS-Fuzz. The issue involves an out-of-bounds read leading to a crash. This vulnerability affects versions of RDKit starting from commit fbbddc6035d74f12edde15bf1a93fa70a3fe6fd1. No official patch or fix information is provided in the available data.

References

Community reviews

Loading reviews…