Publish Advisories

GHSA-5fgf-q57f-wwqf
GHSA-pp85-5j63-xpq3
GHSA-5fgf-q57f-wwqf

Author: advisory-database[bot]

advisories/github-reviewed/2025/09/GHSA-5fgf-q57f-wwqf/GHSA-5fgf-q57f-wwqf.json

@@ -0,0 +1,76 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5fgf-q57f-wwqf",
+  "modified": "2026-06-30T18:48:51Z",
+  "published": "2025-09-26T03:31:07Z",
+  "withdrawn": "2026-06-30T18:48:51Z",
+  "aliases": [],
+  "summary": "Duplicate Advisory: Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule",
+  "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-pp85-5j63-xpq3. This link is maintained to preserve external references.\n\n## Original Description\nA weakness has been identified in Open Babel up to 3.1.1. This affects the function GAMESSOutputFormat::ReadMolecule of the file gamessformat.cpp. This manipulation causes use after free. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be exploited.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "openbabel"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "3.2.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10994"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/openbabel/openbabel/issues/2834"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/user-attachments/files/22318611/poc.zip"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.325922"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.325922"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.654057"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "LOW",
+    "github_reviewed": true,
+    "github_reviewed_at": "2026-06-30T18:48:51Z",
+    "nvd_published_at": "2025-09-26T02:15:52Z"
+  }
+}

advisories/github-reviewed/2026/06/GHSA-pp85-5j63-xpq3/GHSA-pp85-5j63-xpq3.json

@@ -0,0 +1,90 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pp85-5j63-xpq3",
+  "modified": "2026-06-30T18:48:57Z",
+  "published": "2026-06-30T18:48:57Z",
+  "aliases": [
+    "CVE-2025-10994"
+  ],
+  "summary": "Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule",
+  "details": "### Summary\n\nA memory-safety vulnerability in Open Babel's GAMESS output parser\ncaused a use-after-free when reading a crafted input file.\n\n### Details\n\nThe flaw was in `GAMESSOutputFormat::ReadMolecule`. A malformed input\ncaused the parser to dereference a stale pointer after the underlying\nobject had been freed.\n\n### Impact\n\nOpen Babel is a C++ library and CLI used to read and write chemistry\nfile formats; it is shipped by Linux distributions and embedded in\nservices that may parse untrusted input. Triggering this vulnerability\nrequires the victim to open a malicious GAMESS output file with the\n`obabel` tool, the `OBConversion` API, or any of the language\nbindings (Python, Ruby, Java, R, Perl, C#, PHP).\n\n### Affected versions\n\nAll releases up to and including 3.1.1.\n\n### Patched version\n\n3.2.0 (released 2026-05-26).\n\n### Patch\n\nFix commit: https://github.com/openbabel/openbabel/commit/95033d27\nOriginally reported as #2834; fixes consolidated in #2913.\n\nA minimized reproducer for this CVE is checked in under\n`test/files/fuzz_regress/` and is exercised on every CI build under\nASAN+UBSAN by the `fuzzregresstest` harness.\n\n### Credit\n\nReported via OSS-Fuzz.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "openbabel"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "3.2.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/openbabel/openbabel/security/advisories/GHSA-pp85-5j63-xpq3"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10994"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/openbabel/openbabel/issues/2834"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/openbabel/openbabel/commit/95033d27d23c07f98daa92d3cd3ae5ea07594a91"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/openbabel/openbabel"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/user-attachments/files/22318611/poc.zip"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.325922"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.325922"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.654057"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119",
+      "CWE-416"
+    ],
+    "severity": "LOW",
+    "github_reviewed": true,
+    "github_reviewed_at": "2026-06-30T18:48:57Z",
+    "nvd_published_at": null
+  }
+}