CVE-2026-34353: Integer Overflow
Published Mar 27, 2026
·Updated
In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.
Affected Software
6 affected componentsFixes available
ocaml OCaml<=4.14.3
Microsoft cbl2 ocaml 4.13.1-2
Microsoft azl3 ocaml 5.1.1-2
Microsoft cbl2 ocaml 4.13.1-3
Microsoft azl3 ocaml 5.1.1-1
ocaml OCaml<=4.14.3
Event History
Mar 27, 2026
CVE Published
via MITRE·04:55 AM
Data Sourced
via MITRE·04:55 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeaknessAffected Software
Mar 31, 2026
Data Sourced
via Microsoft·08:02 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:02 AM
Affected Software
Updated
via Microsoft·08:02 AM
Severity
Frequently Asked Questions
1
What is the severity of CVE-2026-34353?
CVE-2026-34353 has a high severity due to the potential for arbitrary memory reading resulting from integer overflow.
2
How do I fix CVE-2026-34353?
To fix CVE-2026-34353, upgrade to OCaml version 4.14.4 or later, which addresses the integer overflow issue.
3
What type of vulnerability is CVE-2026-34353?
CVE-2026-34353 is a memory corruption vulnerability caused by an integer overflow in the Bigarray.reshape function.
4
Which versions of OCaml are affected by CVE-2026-34353?
CVE-2026-34353 affects OCaml versions up to and including 4.14.3.
5
What are the potential impacts of CVE-2026-34353?
The potential impacts of CVE-2026-34353 include unauthorized access to sensitive data and possible exploitation of application functionality.