← All advisories

Medium severity5.9NVD Advisory· Published Mar 27, 2026· Updated Apr 14, 2026

CVE-2026-34353

CVE-2026-34353

Description

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Ocaml/Ocaml2 versions
cpe:2.3:a:ocaml:ocaml:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ocaml:ocaml:*:*:*:*:*:*:*:*range: <=4.14.3
- (no CPE)range: <=4.14.3
osv-coords
pkg:apk/chainguard/ocaml-4
Range: < 4.14.4-r0

Patches

Vulnerability mechanics

References

2

github.com/ocaml/ocaml/issues/14655nvdIssue Tracking
github.com/ocaml/ocaml/pull/14674nvdIssue Tracking

News mentions

0

No linked articles in our index yet.