View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-9838 severity important: SUSE including 35 source package names (ocaml, ocaml-4.02.1-4.6.1, …), 107 product×package rows across 26 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (26 product lines)): Fixed 62, Known Not Affected 45.
The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object.