OSV-2022-134

    Dashboard / Vulnerabilities / OSV-2022-134

    OSV-2022-134

    Published: 10 Feb 2022Last Modified: 7 Aug 2023

    Summary: Heap-use-after-free in RDKit::Chirality::cleanupStereoGroups

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44520 Crash type: Heap-use-after-free READ 1 Crash state: RDKit::Chirality::cleanupStereoGroups RDKit::MolOps::assignStereochemistry RDKit::SmilesToMol

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44520

    Affected packages

    Package

    Name: rdkit

    Purl: pkg:generic/rdkit

    Affected ranges

    Type: GIT

    Events:

    Introduced- 7e575db3c495d5546832be2317291861fa7b1030
    Fixed -7053e97a1511f3a716d4cf8320ea9ef6518dc745

    Affected versions

    Release_2022_03_1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-134 | CVE-DB