CVE-2026-34353: Ocaml Bigarray Gc Memory Double Accounting

Double-accounting vulnerability in GC memory tracking. When memory size is conditionally tracked based on an inherited flag rather than the origin of the underlying data, the garbage collector may over-count memory consumption, leading to excessive GC overhead and performance degradation (Denial of Service). Ensure that dynamically supplied buffers do not du

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Cβ
greprules fetch cve-2026-34353-ocaml-bigarray-gc-memory-double-accounting --engine opengrep

Description

Double-accounting vulnerability in GC memory tracking. When memory size is conditionally tracked based on an inherited flag rather than the origin of the underlying data, the garbage collector may over-count memory consumption, leading to excessive GC overhead and performance degradation (Denial of Service). Ensure that dynamically supplied buffers do not du