cve/2022/CVE-2022-42885.md

18 lines
837 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2022-42885](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42885)
![](https://img.shields.io/static/v1?label=Product&message=Open%20Babel&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%203.1.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-824%3A%20Access%20of%20Uninitialized%20Pointer&color=brighgreen)
### Description
A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
### POC
#### Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1668
#### Github
No PoCs found on GitHub currently.