CVE-2025-10994
Open Babel gamessformat.cpp ReadMolecule use after free
- State
- Published
- Severity
- 4.8 Medium
- Published
- Sep 26, 2025
- Updated
- Sep 26, 2025
- Reserved
- Sep 25, 2025
Description
A weakness has been identified in Open Babel up to 3.1.1. This affects the function GAMESSOutputFormat::ReadMolecule of the file gamessformat.cpp. This manipulation causes use after free. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be exploited.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 4.3 Medium | AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Open Babeln/a |
|
References
- VDB-325922 | Open Babel gamessformat.cpp ReadMolecule use after freevdb-entrytechnical-description
- VDB-325922 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #654057 | Open Babel 3.1.1 / master commit 889c350 Use After Freethird-party-advisory
- https://github.com/openbabel/openbabel/issues/2834issue-tracking
- https://github.com/user-attachments/files/22318611/poc.zipexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.