Ocaml Ocaml vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ocaml Ocaml: 2 record(s), with affected versions and fixes.
cpe:2.3:a:ocaml:ocaml

CVE-2026-34353 Medium · 5.1 CWE-190 Mar 27, 2026

Integer Overflow or Wraparound in Ocaml

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.

CVE-2026-28364 High · 7.8 CWE-126 Feb 27, 2026

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal…

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock() function, which performs unbounded memcpy() operations using attacker-controlled lengths from crafted Marshal data.