Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81104.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-81104
Upstream
Published
2026-03-27T06:16:39Z
Modified
2026-09-20T05:33:47Z
Summary
CVE-2026-34353 affecting package ocaml for versions less than 5.1.1-1
Details

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.

References

Affected packages

Azure Linux:3 / ocaml

Package

Name
ocaml
Purl
pkg:rpm/azure-linux/ocaml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.1.1-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81104.json"