CVE-2022-46295

What it actually does

Out-of-bounds write during translationVectors parsing in Gaussian file format leads to arbitrary code execution.

Why it matters to the business

Attackers can achieve remote code execution on Debian systems running vulnerable chromium packages by delivering a single malicious file, risking full host compromise; the 3-year-old flaw with public exploit increases urgency for the listed fixed package versions.

How an attack unfolds

An attacker creates a malformed Gaussian file that triggers the out-of-bounds write in the parsing code, then supplies the file to a target system where chromium or dependent software processes it, resulting in arbitrary code execution.

How to fix it

Upgrade chromium on Debian 11 to version 119.0.6045.105-1~deb11u1 or later.

How to confirm the fix worked

Verify installed chromium package version is at or above 119.0.6045.105-1~deb11u1 and confirm no remaining vulnerable Open Babel parsing paths are reachable.

Typical attack path

1. Craft specially malformed Gaussian file exploiting translationVectors parsing
2. Deliver file to victim via email, download, or shared storage
3. Victim opens or processes the file with affected software
4. Out-of-bounds write occurs leading to code execution

How to detect it

Review file-processing logs and process creation events around chromium or Open Babel usage for unexpected crashes or child process spawns after opening chemical data files.

What your security team should do

• Immediately upgrade all Debian 11 chromium installations to the fixed package version
• Block processing of untrusted Gaussian or related chemical file formats until patched
• Monitor for new exploit releases given ExploitAvailable maturity