Open Babel Heap-Based Buffer Overflow Vulnerability in ChemKin Format Parser

A heap-based buffer overflow vulnerability has been identified in Open Babel versions through 3.1.1. The issue arises in the ChemKin format parser, specifically within the function ChemKinFormat::CheckSpecies in chemkinformat.cpp. This vulnerability allows for local exploitation by manipulating the input ChemKin data, leading to out-of-bounds memory access and causing the program to crash.

Impact

Exploitation of this vulnerability leads to a heap-based buffer overflow, causing a program crash and creating the potential for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by compiling Open Babel with Clang 13.0.1, using AddressSanitizer and UndefinedBehaviorSanitizer. After compiling the program, the fuzzer can be run with a crafted input file that triggers the buffer overflow. The program will crash, and the AddressSanitizer will report the heap-buffer-overflow error, indicating that the vulnerability has been successfully exploited.