← Back

CVE-2026-89087

nvd nist
Published: Sep 10, 2026Modified: Sep 22, 2026Deferred

JSON object

Loading...
7.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 3.9 / Impact: 3.4
Source: MITRE (Secondary)

Description

The cstruct package before 6.3.0 for OCaml mishandles indexes.

Related CWEs

CWE-573
Improper Following of Specification by Caller
The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.

References (1)

Source: cve@mitre.org

Timeline

No history available yet.