OSV-2025-1075

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/inchi/OSV-2025-1075.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-1075
Published
2026-03-03T00:13:02Z
Modified
2026-08-20T14:29:32Z
Summary
Stack-use-after-return in mark_alt_bonds_and_taut_groups
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488729177

Crash type: Stack-use-after-return READ 2
Crash state:
mark_alt_bonds_and_taut_groups
Create_INChI
MakeOneInChIOutOfStrFromINChI
References

Affected packages

OSS-Fuzz / inchi

Package

Name
inchi
Purl
pkg:generic/inchi

Affected ranges

Type
GIT
Repo
https://github.com/IUPAC-InChI/InChI
Events
Introduced
6bf23c941af9f34318b65b5f0c4ce435eb73c7b8
Fixed
7c246aa69c77c4e8b8efc9aaa2088e95c1addd8e

Affected versions

v1.*
v1.07.5

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"8e8c33f8f3df79550f8bfbfd3eaeb467964c4272:7c246aa69c77c4e8b8efc9aaa2088e95c1addd8e"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/inchi/OSV-2025-1075.yaml"