← All advisories

Medium severity5.9NVD Advisory· Published Mar 27, 2026· Updated Jun 17, 2026

CVE-2026-34353

CVE-2026-34353

Description

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Ocaml/Ocaml2 versions
cpe:2.3:a:ocaml:ocaml:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ocaml:ocaml:*:*:*:*:*:*:*:*range: <=4.14.3
- (no CPE)range: <=4.14.3
osv-coords2 versions
pkg:apk/chainguard/ocaml-4 pkg:rpm/opensuse/ocaml&distro=openSUSE%20Tumbleweed
< 4.14.4-r0+ 1 more
- (no CPE)range: < 4.14.4-r0
- (no CPE)range: < 4.14.4-1.1

Patches

Vulnerability mechanics

References

2

github.com/ocaml/ocaml/issues/14655nvdIssue Tracking
github.com/ocaml/ocaml/pull/14674nvdIssue Tracking

News mentions

0

No linked articles in our index yet.