https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:41:26.144611+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0386 certfr-2026-avi-0386 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-02T18:41:26.420848+00:00 certfr-2026-avi-0386 https://cve.radiocsirt.org/vuln/euvd-2026-277735 EUVD-2026-277735 2026-10-02T18:41:26.420885+00:00 EUVD-2026-277735 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34353 fkie_cve-2026-34353 2026-10-02T18:41:26.420900+00:00

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.

 https://cve.radiocsirt.org/vuln/ghsa-6p45-jv22-32gp GHSA-6p45-jv22-32gp 2026-10-02T18:41:26.420926+00:00

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34353 msrc_CVE-2026-34353 — In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when u… 2026-10-02T18:41:26.420941+00:00 msrc_CVE-2026-34353 https://cve.radiocsirt.org/vuln/oesa-2026-1889 OESA-2026-1889 — ocaml security update 2026-10-02T18:41:26.420958+00:00

Affected: openEuler:24.03-LTS-SP3: ocaml

OCaml is a high-level, strongly-typed, functional and object-oriented programming language from the ML family of languages. This package includes runtime environment, X11 support ,Documentation generator and emacs. Security Fix(es):

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.(CVE-2026-34353)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11136-1 openSUSE-SU-2026:11136-1 — ocaml-4.14.4-1.1 on GA media 2026-10-02T18:41:26.420981+00:00

ocaml-4.14.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/osec-2026-04 OSEC-2026-04 — Bigarray.reshape integer overflow 2026-10-02T18:41:26.420999+00:00

Affected: opam: ocaml

The function `caml_ba_reshape`, part of the OCaml runtime (in runtime/bigarray.c), had a missing check for integer overflow when computing the size to be allocated. This leads to a segmentation fault.

Any application using `Bigarray.reshape` (or `reshape_N`) with untrusted and unchecked input can result in a segmentation fault.

## Timeline

- 2026-06-18 security advisory released - 2026-06-15 OCaml 4.14.4 released - 2026-04-16 Florian Angeletti backported the fix to the 4.14 branch - 2026-04-15 Stephen Dolan proposed fix https://github.com/ocaml/ocaml/pull/14691 - 2026-03-18 Andriy Sultanov reported https://github.com/ocaml/ocaml/issues/14655

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34353 UBUNTU-CVE-2026-34353 2026-10-02T18:41:26.421023+00:00

Affected: Ubuntu:Pro:14.04:LTS: ocaml, Ubuntu:Pro:16.04:LTS: ocaml, Ubuntu:Pro:18.04:LTS: ocaml, Ubuntu:20.04:LTS: ocaml, Ubuntu:22.04:LTS: ocaml, Ubuntu:24.04:LTS: ocaml

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.