A vulnerability labeled as critical has been found in Open Babel up to 3.1.1. The impacted element is the function
OBAtom::SetFormalCharge in the library include/openbabel/atom.h of the component MOL2 File Handler. The manipulation results in out-of-bounds read.
This vulnerability is known as CVE-2026-2705. It is possible to launch the attack remotely. Furthermore, an exploit is available.
The project was informed of the problem early through an issue report but has not responded yet.
