CVE-2025-10996 MEDIUM

CVE-2025-10996: Open Babel smilesformat.cpp ParseSmiles heap-based overflow

Vendor N/A
Product Open Babel
Weakness CWE-122
Published September 26, 2025
Last update September 26, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit is now public and may be used.

Key dates

02Disclosure timeline

September 26, 2025 CVE published
September 26, 2025 Record updated