Ahuo

**Name of the Vulnerable Software and Affected Versions** Open Babel versions prior to 3.1.2 **Description** A flaw exists in Open Babel that may lead to a null pointer dereference. This issue is related to the `PQSFormat::ReadMolecule` function located in the file `/src/formats/PQSformat.cpp`. Exploitation is limited to local execution. The details of the issue have been publicly disclosed. **Recommendations** Update to a version newer than 3.1.1.

**Name of the Vulnerable Software and Affected Versions** libucl versions up to 0.9.2 **Description** A flaw exists in the `ucl include common` function within the `/src/ucl util.c` file. This can lead to a heap-based buffer overflow. Local access is needed for exploitation. The exploit details have been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open Babel versions through 3.1.1 **Description** A heap-based buffer overflow exists in Open Babel due to a flaw in the `OBSmilesParser::ParseSmiles` function located in the `/src/formats/smilesformat.cpp` file. Local exploitation of this issue is possible. The exploit is publicly available. **Recommendations** Update to a version later than 3.1.1.

**Name of the Vulnerable Software and Affected Versions** Open Babel versions through 3.1.1 **Description** A security issue has been identified in Open Babel. The `zlib stream::basic unzip streambuf::underflow` function within the `/src/zipstreamimpl.h` library is susceptible to memory corruption. Local access is required for exploitation. The exploit details have been publicly disclosed. **Recommendations** Update to a version beyond 3.1.1.

**Name of the Vulnerable Software and Affected Versions** Open Babel versions through 3.1.1 **Description** A flaw exists in Open Babel, specifically within the `ChemKinFormat::CheckSpecies` function located in the `/src/formats/chemkinformat.cpp` file. This can lead to a heap-based buffer overflow when manipulation occurs. The issue is locally exploitable. **Recommendations** Update to a version later than 3.1.1.

**Name of the Vulnerable Software and Affected Versions** Open Babel versions prior to 3.1.2 **Description** A flaw exists in Open Babel that may lead to a null pointer dereference. This issue stems from the `ChemKinFormat::ReadReactionQualifierLines` function located in the `/src/formats/chemkinformat.cpp` file. The issue can be exploited locally. The exploit has been publicly disclosed. **Recommendations** Update to version 3.1.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open Babel versions prior to 3.1.2 **Description** A flaw exists in Open Babel versions up to 3.1.1 due to a null pointer dereference within the `CacaoFormat::SetHilderbrandt` function located in the `/src/formats/cacaoformat.cpp` file. This issue is exploitable with local access. The exploit has been publicly released. **Recommendations** Update to a version newer than 3.1.1.

**Name of the Vulnerable Software and Affected Versions** Open Babel versions prior to 3.1.2 **Description** A flaw exists in Open Babel, specifically within the `GAMESSOutputFormat::ReadMolecule` function located in the `gamessformat.cpp` file. This issue results in a use-after-free condition. Exploitation is possible on the local host, and an exploit has been publicly released. **Recommendations** Update to Open Babel version 3.1.2 or later.

**Name of the Vulnerable Software and Affected Versions** axboe fio versions up to 3.41 **Description** A flaw exists in axboe fio up to version 3.41. This issue is related to the ` parse jobs ini` function within the `init.c` file, which can lead to a use after free condition. The attack requires local access. The exploit for this issue has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** axboe fio versions up to 3.41 **Description** A flaw exists in axboe fio up to version 3.41 related to the `str buffer pattern cb` function within the file options.c. Manipulation of this function can lead to a null pointer dereference. Exploitation requires local access. The exploit for this issue has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ImageMagick version 7.0.6-8 Q16 **Description** A heap-based buffer over-read issue in the SampleImage() function in MagickCore/resize.c allows remote attackers to cause a denial of service via a crafted file. **Recommendations** For ImageMagick version 7.0.6-8 Q16, consider updating to a newer version that contains a fix for this issue, as using a crafted file can cause a denial of service.

**Name of the Vulnerable Software and Affected Versions** ImageMagick version 7.0.6-8 Q16 **Description** A heap-based buffer overflow issue exists, allowing remote attackers to potentially cause a denial of service or achieve code execution. This is possible through a crafted file. **Recommendations** For ImageMagick version 7.0.6-8 Q16, update to a version that addresses this issue to prevent potential exploitation.