CVE-2022-43467

What it actually does

Out-of-bounds write during PQS format coord_file parsing allows memory corruption that can be leveraged for arbitrary code execution.

Why it matters to the business

Systems that process chemistry or molecular files with Open Babel become susceptible to remote code execution, risking data theft, ransomware deployment, or full host compromise in research and scientific computing environments.

How an attack unfolds

An attacker crafts a malformed PQS file containing specially constructed coordinate data, then delivers it via email, download, or shared storage; when a user or automated workflow opens the file with vulnerable Open Babel, the parser writes beyond allocated buffers and achieves code execution.

How to fix it

Upgrade Open Babel to a patched release once available; until then, disable or sandbox the PQS format parser and avoid opening untrusted molecular files with the library.

How to confirm the fix worked

Rebuild or obtain a patched binary, then attempt to parse both benign and known-triggering PQS test files in an isolated environment while monitoring for crashes or unexpected memory writes.

Typical attack path

1. Generate malformed PQS coordinate file exploiting coord_file parsing
2. Host or transmit the file through common delivery channels
3. Victim opens the file directly or via batch processing with Open Babel
4. Out-of-bounds write triggers shellcode or ROP chain for code execution

How to detect it

Review application and system logs for Open Babel crashes or segmentation faults during PQS file handling; correlate with file creation or download events involving .pqs extensions.

What your security team should do

• Inventory all instances of Open Babel across development, research, and CI systems
• Block or quarantine untrusted PQS and related molecular files at email gateways and file shares
• Apply updates immediately upon release and verify removal of the vulnerable commit
• Consider replacing Open Babel with maintained alternatives for production workflows