Files
PoC-in-GitHub/2026/CVE-2026-28364.json

46 lines
1.6 KiB
JSON

[
{
"id": 1385403219,
"name": "ocaml-marshal-vulnerability",
"full_name": "Akshay-M-Singh\/ocaml-marshal-vulnerability",
"owner": {
"login": "Akshay-M-Singh",
"id": 268695334,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/268695334?v=4",
"html_url": "https:\/\/github.com\/Akshay-M-Singh",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Akshay-M-Singh\/ocaml-marshal-vulnerability",
"description": "I found an integer overflow that defeats OCaml's fix for CVE-2026-28364: heap memory disclosure and SIGBUS crashes via Marshal deserialization. PoCs, advisory, and proposed patch — fixed in OCaml 5.5.1 (OSEC-2026-18).",
"fork": false,
"created_at": "2026-09-24T12:02:23Z",
"updated_at": "2026-10-05T11:10:06Z",
"pushed_at": "2026-10-05T11:10:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"infoleak",
"integer-overflow",
"marshal",
"memory-safety",
"ocaml",
"oob-read",
"osec-2026-18",
"security",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]