CVE-2022-46294

What it actually does

Out-of-bounds write vulnerabilities in the translationVectors parsing functionality allow arbitrary code execution when processing malformed MOPAC Cartesian files in supported formats.

Why it matters to the business

Attackers can execute arbitrary code on affected systems by tricking users into opening malicious files, potentially leading to data compromise or system takeover. The vulnerability affects chromium packages on Debian 11 with high ecosystem prevalence requiring urgent updates.

How an attack unfolds

An attacker crafts a malformed MOPAC Cartesian file exploiting the out-of-bounds write during translationVectors parsing, then delivers it to the victim who opens it with the vulnerable software, leading to code execution. Exploit code is publicly available.

How to fix it

Upgrade chromium on Debian 11 to version 119.0.6045.105-1~deb11u1 or later. Apply all available security patches promptly given the exploit availability and 1184 days since publication.

How to confirm the fix worked

Confirm the installed package version meets or exceeds the fixed version 119.0.6045.105-1~deb11u1 and test parsing of known malformed sample files in a controlled environment.

Typical attack path

1. Craft a specially malformed file targeting MOPAC Cartesian format parsing
2. Deliver the malicious file to the target user or system
3. Victim opens the file using affected software
4. Out-of-bounds write triggers arbitrary code execution

How to detect it

Review application crash logs and file access events for unexpected behavior when processing MOPAC Cartesian files; correlate with known exploit maturity indicators.

What your security team should do

• Immediately apply the specified chromium updates on all Debian 11 systems
• Restrict opening of untrusted files in affected software
• Monitor EPSS trends and exploit availability for prioritization