Lucene search
+L

171 matches found

OSV
OSV
added 2026/04/11 11:10 a.m.9 views

OESA-2026-1891 ocaml security update

OCaml is a high-level, strongly-typed, functional and object-oriented programming language from the ML family of languages. This package includes runtime environment, X11 support ,Documentation generator and emacs. Security Fixes: In OCaml through 4.14.3, Bigarray.reshape allows an integer...

5.9CVSS5.9AI score0.00114EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/27 6:16 a.m.19 views

CVE-2026-34353

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...

5.9CVSS0.00114EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/27 6:16 a.m.6 views

DEBIAN-CVE-2026-34353

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...

5.1CVSS5.4AI score0.00114EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/27 6:16 a.m.12 views

UBUNTU-CVE-2026-34353

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...

5.9CVSS5.9AI score0.00114EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/03/27 6:16 a.m.9 views

CVE-2026-34353

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...

5.9CVSS5.9AI score0.00114EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/27 4:55 a.m.51 views

CVE-2026-34353

CVE-2026-34353 affects OCaml up to and including 4.14.3. The Bigarray.reshape operation may trigger an integer overflow when processing untrusted input, allowing reading of arbitrary memory. CVSS indicates a local, high-complexity issue with no user interaction and potential confidentiality impac...

5.9CVSS5.9AI score0.00114EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/03/27 4:55 a.m.18 views

CVE-2026-34353

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...

5.9CVSS5.9AI score0.00114EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/27 4:55 a.m.2 views

CVE-2026-34353

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...

5.9CVSS5.9AI score0.00114EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/03/27 4:55 a.m.4 views

CVE-2026-34353

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...

5.9CVSS5.9AI score0.00114EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/27 4:55 a.m.36 views

CVE-2026-34353

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...

5.9CVSS0.00114EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/27 12:00 a.m.19 views

ocaml 输入验证错误漏洞

OCaml is an open-source functional programming language and its compiler developed by OCaml. Versions of ocaml 4.14.3 and earlier contained a vulnerability related to input validation errors. This vulnerability stemmed from integer overflows in Bigarray.reshape, which could lead to arbitrary memo...

5.9CVSS5.9AI score0.00114EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/27 12:00 a.m.10 views

PT-2026-28619

Name of the Vulnerable Software and Affected Versions OCaml versions through 4.14.3 Description The Bigarray.reshape function in OCaml versions through 4.14.3 contains an integer overflow issue. This can lead to arbitrary memory being read when processing untrusted data. The function...

5.9CVSS6AI score0.00114EPSS
SaveExploits0References24
OSV
OSV
added 2026/02/18 3:18 p.m.12 views

AZL-77874 CVE-2025-71225 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: md: suspend array while updating raiddisks via sysfs In raid1reshape, freezearray is called before modifying the r1bio memory pool conf-r1biopool and conf-raiddisks, and unfreezearray is called after the update is completed...

5.3CVSS6AI score0.00084EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/29 3:26 a.m.28 views

CVE-2025-71006

A floating point exception FPE in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

6.5CVSS5.9AI score0.00288EPSS
SaveExploits1References1
Snyk
Snyk
added 2026/01/28 9:50 p.m.3 views

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero via the oneflow.reshape process. An attacker can cause the application to crash or become unresponsive by submitting specially crafted input that triggers a floating point exception. Remediation There is no fixed versio...

7.5CVSS5.5AI score0.00288EPSS
SaveExploits1References2
NVD
NVD
added 2026/01/28 9:16 p.m.17 views

CVE-2025-71006

A floating point exception FPE in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

6.5CVSS0.00288EPSS
SaveExploits1References2
CVE
CVE
added 2026/01/28 12:00 a.m.28 views

CVE-2025-71006

The CVE-2025-71006 entry concerns OneFlow v0.9.0, where a flaw in the oneflow.reshape component can trigger a floating point exception (FPE) and cause a Denial of Service (DoS) via a crafted input. Multiple connected sources (Red Hat, NVD, OSV, CVE listings, and vulnerability trackers) confirm th...

6.5CVSS5.9AI score0.00288EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/01/28 12:00 a.m.12 views

CVE-2025-71006

A floating point exception FPE in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

6.5CVSS5.4AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/28 12:00 a.m.5 views

CVE-2025-71006

A floating point exception FPE in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

5.9AI score0.00288EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/01/28 12:00 a.m.16 views

PT-2026-5215

Name of the Vulnerable Software and Affected Versions OneFlow version 0.9.0 Description A crafted input to the oneflow.reshape component can trigger a floating point exception FPE, leading to a Denial of Service DoS. Recommendations At the moment, there is no information about a newer version tha...

5.8AI score0.00288EPSS
SaveExploits1References4
Rows per page
Query Builder