OSV-2022-1288

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/rdkit/OSV-2022-1288.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-1288
Published
2024-11-04T00:16:22Z
Modified
2026-06-17T14:12:28Z
Summary
Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376787368

Crash type: Stack-buffer-overflow READ 1
Crash state:
bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>
bool SmilesParseOps::parser::parse_it<std::__1::__wrap_iter<char const*> >
SmilesParseOps::parseCXExtensions
References

Affected packages

OSS-Fuzz / rdkit

Package

Name
rdkit
Purl
pkg:generic/rdkit

Affected ranges

Type
GIT
Repo
https://github.com/rdkit/rdkit.git
Events
Introduced
db15b372a13380693c9ebd33d270c6bddf394883
Fixed
afc44b0192aea809f487af060ffa9b9e60839ee1

Affected versions

Other
Release_2022_03_1
Release_2022_03_1b1
Release_2022_03_2
Release_2022_03_3
Release_2022_03_4
Release_2022_03_5
Release_2022_09_1
Release_2022_09_1b1
Release_2022_09_2
Release_2022_09_3
Release_2022_09_4
Release_2022_09_5
Release_2023_03_1
Release_2023_03_1b1
Release_2023_03_2
Release_2023_03_3
Release_2023_09_1
Release_2023_09_1b1
Release_2023_09_2
Release_2023_09_3
Release_2023_09_4
Release_2023_09_5
Release_2023_09_6
Release_2024_03_1
Release_2024_03_1b1
Release_2024_03_2
Release_2024_03_3
Release_2024_03_4
Release_2024_03_5
Release_2024_03_6
Release_2024_09_1
Release_2024_09_1b1
Release_2024_09_2
Release_2024_09_3
Release_2024_09_4
Release_2024_09_5
Release_2024_09_6
Release_2025_03_1
Release_2025_03_1b1
Release_2025_03_2
Release_2025_03_3
Release_2025_03_4
Release_2025_03_5
Release_2025_03_6
Release_2025_09_1
Release_2025_09_1b1
Release_2025_09_2
Release_2025_09_3
Release_2025_09_4
Release_2025_09_5
Release_2025_09_6
Release_2026_031b1
Release_2026_03_1
Release_2026_03_2
Release_2026_03_3

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"595aef326a124d54b542e7ff0827219709b19724:afc44b0192aea809f487af060ffa9b9e60839ee1"
introduced_range 
"b603d0d97ed4ecfba9205e449ecff9ed1897e224:3757a1e0fa4757c9ed0b422578538772cc0dab5c"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/rdkit/OSV-2022-1288.yaml"