PT-2025-39476 · Open Babel+2 · Open Babel+2

Ahuo · CVE-2025-10994 · Published 2025-09-25 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open Babel versions prior to 3.1.2

Description A flaw exists in Open Babel, specifically within the GAMESSOutputFormat::ReadMolecule function located in the gamessformat.cpp file. This issue results in a use-after-free condition. Exploitation is possible on the local host, and an exploit has been publicly released.

Recommendations Update to Open Babel version 3.1.2 or later.

Exploit

Fix

DoS

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

BDU:2025-14410

CVE-2025-10994

GHSA-5FGF-Q57F-WWQF

GHSA-PP85-5J63-XPQ3

OPENSUSE-SU-2026:11259-1

OPENSUSE-SU-2026:21190-1

PYSEC-2026-2789

Affected Products

Debian

Open Babel

Red Os

References · 56

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10994.json · Exploit
• 🔥 https://github.com/openbabel/openbabel/issues/2834 · Exploit
• 🔥❌ https://github.com/user-attachments/files/22318611/poc.zip · Exploit, Deleted
• https://osv.dev/vulnerability/openSUSE-SU-2026:21190-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10994 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-10994 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2789 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5fgf-q57f-wwqf · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-10994 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-10994 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10994 · Security Note
• https://bdu.fstec.ru/vul/2025-14410 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-10994 · Security Note
• https://osv.dev/vulnerability/GHSA-pp85-5j63-xpq3 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-10994 · Vendor Advisory