CVE-2018-9838 – Gentoo Linux Security Advisory 202007-48

https://notcve.org/view.php?id=CVE-2018-9838

06 Apr 2018 — The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object. La función caml_ba_deserialize en byterun/bigarray.c en la biblioteca estándar en OCaml 4.06.0 tiene un desbordamiento de enteros que, en situaciones en las que los datos serializado... • https://caml.inria.fr/mantis/view.php?id=7765 • CWE-190: Integer Overflow or Wraparound •