CVE-2026-34353
Medium · 5.9CVSS
5.9
EPSS
0.1%
Published
Mar 27, 2026
CISA due date
—
The record
In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| opam | ocaml | 0 | 4.14.4 |
| openSUSE:Tumbleweed | ocaml | 0 | 4.14.4-1.1 |
Related vulnerabilities
- OSEC-2026-04 Bigarray.reshape integer overflow Same vulnerability
- OSEC-2026-05 Windows command execution via filename quotes. Also affects ocaml
- CVE-2026-28364 In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal… Also affects ocaml
- OSEC-2026-01 Buffer Over-Read in OCaml Marshal Deserialization Also affects ocaml
- CVE-2026-110264 An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before… CWE-190
- CVE-2026-53615 util-linux is a random collection of Linux utilities. CWE-190
- CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-190
- CVE-2026-106571 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-190