CRITICAL9.8CVE-2018-9838The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations… from 0, < 4.05.0-11
from 0, < 4.02.3-9
from 0, < 3.12.1-4+deb7u1
HIGH7.8In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution…
from 0
HIGH7.8OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but with much less impact…
from 0, < 4.05.0-9
MEDIUM5.1In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is pro…
from 0
—OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-…
from 0, < 4.00.0~beta2-1