https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:03:23 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0386 certfr-2026-avi-0386 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0386 https://cve.radiocsirt.org/vuln/euvd-2026-277735 EUVD-2026-277735 https://cve.radiocsirt.org/vuln/euvd-2026-277735 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34353 <p>In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.</p> <p>In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34353 https://cve.radiocsirt.org/vuln/ghsa-6p45-jv22-32gp <p>In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.</p> <p>In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.</p> https://cve.radiocsirt.org/vuln/ghsa-6p45-jv22-32gp https://cve.radiocsirt.org/vuln/msrc_cve-2026-34353 msrc_CVE-2026-34353 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34353 https://cve.radiocsirt.org/vuln/oesa-2026-1889 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: ocaml</p> <p>OCaml is a high-level, strongly-typed, functional and object-oriented programming language from the ML family of languages. This package includes runtime environment, X11 support ,Documentation generator and emacs. Security Fix(es):</p> <p>In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.(CVE-2026-34353)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: ocaml</p> <p>OCaml is a high-level, strongly-typed, functional and object-oriented programming language from the ML family of languages. This package includes runtime environment, X11 support ,Documentation generator and emacs. Security Fix(es):</p> <p>In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.(CVE-2026-34353)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1889 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11136-1 <p>ocaml-4.14.4-1.1 on GA media</p> <p>ocaml-4.14.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11136-1 https://cve.radiocsirt.org/vuln/osec-2026-04 <p><strong>Affected:</strong> opam: ocaml</p> <p>The function `caml_ba_reshape`, part of the OCaml runtime (in runtime/bigarray.c), had a missing check for integer overflow when computing the size to be allocated. This leads to a segmentation fault.</p> <p>Any application using `Bigarray.reshape` (or `reshape_N`) with untrusted and unchecked input can result in a segmentation fault.</p> <p>## Timeline</p> <p>- 2026-06-18 security advisory released - 2026-06-15 OCaml 4.14.4 released - 2026-04-16 Florian Angeletti backported the fix to the 4.14 branch - 2026-04-15 Stephen Dolan proposed fix https://github.com/ocaml/ocaml/pull/14691 - 2026-03-18 Andriy Sultanov reported https://github.com/ocaml/ocaml/issues/14655</p> <p><strong>Affected:</strong> opam: ocaml</p> <p>The function `caml_ba_reshape`, part of the OCaml runtime (in runtime/bigarray.c), had a missing check for integer overflow when computing the size to be allocated. This leads to a segmentation fault.</p> <p>Any application using `Bigarray.reshape` (or `reshape_N`) with untrusted and unchecked input can result in a segmentation fault.</p> <p>## Timeline</p> <p>- 2026-06-18 security advisory released - 2026-06-15 OCaml 4.14.4 released - 2026-04-16 Florian Angeletti backported the fix to the 4.14 branch - 2026-04-15 Stephen Dolan proposed fix https://github.com/ocaml/ocaml/pull/14691 - 2026-03-18 Andriy Sultanov reported https://github.com/ocaml/ocaml/issues/14655</p> https://cve.radiocsirt.org/vuln/osec-2026-04 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34353 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ocaml, Ubuntu:Pro:16.04:LTS: ocaml, Ubuntu:Pro:18.04:LTS: ocaml, Ubuntu:20.04:LTS: ocaml, Ubuntu:22.04:LTS: ocaml, Ubuntu:24.04:LTS: ocaml</p> <p>In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ocaml, Ubuntu:Pro:16.04:LTS: ocaml, Ubuntu:Pro:18.04:LTS: ocaml, Ubuntu:20.04:LTS: ocaml, Ubuntu:22.04:LTS: ocaml, Ubuntu:24.04:LTS: ocaml</p> <p>In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34353