PT-2025-39476 · Open Babel+2 · Open Babel+2

Ahuo · Published 2025-09-25 · Updated 2025-11-12 · CVE-2025-10994

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open Babel versions prior to 3.1.2

Description A flaw exists in Open Babel, specifically within the GAMESSOutputFormat::ReadMolecule function located in the gamessformat.cpp file. This issue results in a use-after-free condition. Exploitation is possible on the local host, and an exploit has been publicly released.

Recommendations Update to Open Babel version 3.1.2 or later.

Exploit

Fix

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

BDU:2025-14410

CVE-2025-10994

Affected Products

Debian

Open Babel

Red Os

References · 18

• 🔥 https://github.com/openbabel/openbabel/issues/2834 · Exploit
• 🔥❌ https://github.com/user-attachments/files/22318611/poc.zip · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2025-10994 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-10994 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-10994 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14410 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-10994 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-10994 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-10994 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-10994 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-openbabel-12112025 · Note
• https://vuldb.com/?submit.654057 · Note
• https://t.me/cveNotify/136481 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-xdrawchem-12112025 · Note