OC
Product
OCaml
by OCaml · last CVE Mar 27, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch

Add OCaml to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-9838
9.8
4%
Apr 6
The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from…
Affected: 4.06.0
CVE-2017-9772
9.8
3%
Jun 23
Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the…
Affected: 4.04.0; 4.04.1
CVE-2015-8869
9.1
5%
Jun 13
OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a…
Affected: through 4.02.3
Showing 3