Open Babel PQSformat.cpp ReadMolecule null pointer dereference
Priority MEDIUM 55CWE-404Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-404.
Summary
A vulnerability was determined in Open Babel up to 3.1.1. This affects the function PQSFormat::ReadMolecule of the file /src/formats/PQSformat.cpp. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00246 15th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix Fixed openbabel (PyPI): 3.2.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Open Babel | 3.1.0; 3.1.1 | — | No fix listed | CNA |
| — | openbabel (PyPI) | before 3.2.0 | 3.2.0 | Patch available | GHSA-m982-7q3h-r784 |
- Open Babel Vendor— Affected 3.1.0; 3.1.1 Fixed in — No fix listed CNA
- openbabel (PyPI) Vendor— Affected before 3.2.0 Fixed in 3.2.0 Patch available GHSA-m982-7q3h-r784
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openbabel:open_babel:*:*:*:*:*:*:*:* | up to 3.1.1 | Vulnerable | Open Babel |
- cpe:2.3:a:openbabel:open_babel:*:*:*:*:*:*:*:* Versions up to 3.1.1 Vulnerable ·Open Babel
Remediation
- Fix · GHSA-m982-7q3h-r784 openbabel (PyPI) Fixed in 3.2.0 Advisory →
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2025-11000
- 2026-10-03 Alias added: GHSA-m982-7q3h-r784
References
Exploit 2
More Open Babel vulnerabilities
- TI-2022-22844 Memory corruption in Open Babel CVSS 3.1CRITICAL 9.8
- TI-2022-22843 Memory corruption in Open Babel CVSS 3.1CRITICAL 9.8
- TI-2022-22840 Memory corruption in Open Babel CVSS 3.1CRITICAL 9.8
- TI-2022-22839 Heap-based buffer overflow in Open Babel CVSS 3.1CRITICAL 9.8
- TI-2022-22838 Heap-based buffer overflow in Open Babel CVSS 3.1CRITICAL 9.8
- TI-2022-21850 A use of uninitialized pointer vulnerability exists in the MSI format atom functionality… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-11000 · CVE Program
- CVE-2025-11000 · NVD
- FIRST EPSS
- GHSA-m982-7q3h-r784 · GitHub Advisory Database · CC BY 4.0
- CVE-2025-11000 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences