OSEC-2026-01
Medium · 6.8CVSS
6.8
EPSS
—
Published
Feb 17, 2026
CISA due date
—
The record
Buffer Over-Read in OCaml Marshal Deserialization
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| opam | ocaml | 0 | 4.14.3 |
Related vulnerabilities
- CVE-2026-28364 In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal… Same vulnerability
- OSEC-2026-05 Windows command execution via filename quotes. Also affects ocaml
- OSEC-2026-04 Bigarray.reshape integer overflow Also affects ocaml
- CVE-2026-34353 In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant… Also affects ocaml