CVE-2026-34353: Ocaml

Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days.

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.

Affected products

• Ocaml Ocaml: up to and including 4.14.3

Published 2026-03-27. Last modified 2026-06-17.