CVE-2022-46291

What it actually does

Out-of-bounds write during translationVectors parsing in multiple file formats including MSI, enabling arbitrary code execution when a malformed file is processed.

Why it matters to the business

Systems handling molecular data files can be compromised, allowing attackers to execute code and potentially disrupt scientific workflows or exfiltrate research data.

How an attack unfolds

An attacker creates a specially crafted MSI file containing malformed translationVectors data; when the file is opened or converted using the vulnerable library, the parser writes outside allocated buffers and executes attacker-controlled code.

How to fix it

Upgrade to a patched version of Open Babel once released; in the interim, disable or sandbox processing of untrusted MSI files and restrict Open Babel usage to trusted inputs only.

How to confirm the fix worked

Verify the installed Open Babel version against security advisories; test file processing with known-good and known-malformed MSI samples in an isolated environment to confirm absence of crashes or unexpected behavior.

Typical attack path

1. Craft a malicious MSI file with oversized or invalid translationVectors structures
2. Deliver the file via email, download, or shared storage
3. Victim opens or processes the file with Open Babel
4. Parser triggers out-of-bounds write leading to code execution

How to detect it

Review process execution logs and crash reports for Open Babel invocations involving MSI files; look for unexpected child processes or memory corruption indicators following file conversion attempts.

What your security team should do

• Block or sandbox Open Babel execution on untrusted MSI files
• Monitor vendor channels for official fixed releases and apply promptly
• Restrict Open Babel to internal, vetted data sources only