openbabel has 24 CVEs on record. Disclosures have slowed: 0 in the last 90 days after 24 in the 90 before. The busiest recent month was July 2026 with 18. The median CVSS is 7.8 (high). None have a confirmed exploitation report. The dominant weakness classes are CWE-119 (13) and CWE-787 (12).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 0 prev 24
Weakness classes
Products
- openbabel 24
Worst active — by depth score
CVE-2022-46292High· 7.8Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)43CVE-2025-10997High· 7.8Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies43CVE-2022-46295High· 7.8Open Babel has out-of-bounds write in MSI translationVectors[]43CVE-2022-46294High· 7.8Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)43CVE-2022-46293High· 7.8Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)43
openbabel vulnerabilities
CVEs affecting openbabel, newest first. Open any entry for full detail, references, and exploit status.
24 CVEsRSS
CVE-2022-46292High· 7.8Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)
Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)
CVE-2025-10997High· 7.8Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
CVE-2025-10998Low· 5.5Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines
Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines
CVE-2025-10999Medium· 5.5Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt
Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt
CVE-2025-11000Medium· 4.4Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
CVE-2022-37331High· 7.8Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
CVE-2022-41793High· 7.8Open Babel has out-of-bounds write in CSR PadString (title field)
Open Babel has out-of-bounds write in CSR PadString (title field)
CVE-2022-42885High· 7.8Open Babel has uninitialized pointer dereference in GRO residue parser
Open Babel has uninitialized pointer dereference in GRO residue parser
CVE-2022-43467High· 7.8Open Babel has out-of-bounds write in PQS coord_file parser
Open Babel has out-of-bounds write in PQS coord_file parser
CVE-2022-43607High· 7.8Open Babel has out-of-bounds write in MOL2 attribute/value parser
Open Babel has out-of-bounds write in MOL2 attribute/value parser
CVE-2022-44451High· 7.8Open Babel has uninitialized pointer dereference in MSI atom parser
Open Babel has uninitialized pointer dereference in MSI atom parser
CVE-2022-46280High· 7.8Open Babel has uninitialized pointer dereference in PQS pFormat
Open Babel has uninitialized pointer dereference in PQS pFormat
CVE-2022-46289High· 7.8Open Babel has out-of-bounds write in ORCA nAtoms parser
Open Babel has out-of-bounds write in ORCA nAtoms parser
CVE-2022-46290High· 7.8Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)
Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)
CVE-2022-46291High· 7.8Open Babel has out-of-bounds write in Gaussian translationVectors[]
Open Babel has out-of-bounds write in Gaussian translationVectors[]
CVE-2022-46293High· 7.8Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)
Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)
CVE-2022-46294High· 7.8Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
CVE-2022-46295High· 7.8Open Babel has out-of-bounds write in MSI translationVectors[]
Open Babel has out-of-bounds write in MSI translationVectors[]
CVE-2025-10995Low· 7.8Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
CVE-2025-10996High· 7.8Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
CVE-2026-2704Low· 4.4Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
CVE-2026-2705Low· 5.5Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
CVE-2026-3408Low· 5.5Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
CVE-2025-10994Low· 7.8Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule