PT-2026-28619 · Ocaml · Ocaml

CVE-2026-34353

·

Publicado

2026-03-27

·

Atualizado

2026-06-27

CVSS v3.1

6.1

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions OCaml versions through 4.14.3
Description The Bigarray.reshape function in OCaml versions through 4.14.3 contains an integer overflow issue. This can lead to arbitrary memory being read when processing untrusted data. The function Bigarray.reshape is susceptible to this issue.
Recommendations Update to a version of OCaml newer than 4.14.3. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

AZL-81104
CVE-2026-34353
OESA-2026-1889
OESA-2026-1890
OESA-2026-1891
OESA-2026-1892
OESA-2026-1893
OPENSUSE-SU-2026:11136-1
OSEC-2026-04

Produtos afetados

Ocaml