Integer Overflow Vulnerability in OCaml's Bigarray Reshape

CVE-2026-34353

What is CVE-2026-34353?

In the OCaml programming language, specifically in Bigarray versions up to 4.14.3, there exists a critical integer overflow vulnerability in the reshape function. This flaw allows attackers to manipulate untrusted data, leading to the potential reading of arbitrary memory locations. Such behavior could be exploited to gain unauthorized access to sensitive information or control over the running system.

References