VYPR

rpm package

opensuse/ocaml&distro=openSUSE Leap 16.0

pkg:rpm/opensuse/ocaml&distro=openSUSE%20Leap%2016.0

Vulnerabilities (1)

  • CVE-2026-28364Feb 27, 2026
    affected < 4.14.2-160000.4.1fixed 4.14.2-160000.4.1

    In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock() function, which performs unbou