CNNVD-202509-4197 Information

CNNVD ID

CNNVD-202509-4197

CVE-2025-11000

  • CNNVD Published: 2025-09-26

Description (Chinese)

openbabel是Open Babel开源的一个化学工具箱软件。 openbabel 3.1.1及之前版本存在代码问题漏洞,该漏洞源于文件/src/formats/PQSformat.cpp中函数PQSFormat::ReadMolecule存在空指针取消引用,可能导致本地执行攻击。

Description (English)

Openbabel is an Open Babel open-source chemical toolbox software. Openbabel 3.1.1 and previous versions have a code problem loophole, which stems from the possible local execution of an attack as a result of the absence of an empty reference pointer in the PQSFormat:: ReadMolecule.

Hazard Level

Critical

Vulnerability Type

代码问题

Affected Vendor

Open Babel

Published

2025-09-26

Last Modified

2026-02-24

References

https://github.com/openbabel/openbabel/issues/2826 https://github.com/user-attachments/files/22318474/poc.zip https://vuldb.com/?ctiid.325928 https://vuldb.com/?id.325928 https://vuldb.com/?submit.654066

Share on: