CVE-2022-46291
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jul 21, 2023
Updated: Jul 27, 2023
CWE ID 119
CWE ID 787
Summary
CVE-2022-46291 is a vulnerability affecting Open Babel, specifically versions 3.1.1 and master commit 530dbfa3. This issue involves multiple out-of-bounds write vulnerabilities in the translationVectors parsing functionality of the software. When processing a maliciously crafted MSI file, an attacker can exploit these vulnerabilities to execute arbitrary code. Consequently, handling untrusted MSI files poses a significant risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Open Babel