Cstruct
Monthly
Index mishandling in the OCaml cstruct library before 6.3.0 allows network-reachable attackers to trigger partial confidentiality, integrity, and availability impacts via crafted binary data passed to affected parsing routines. cstruct is a low-level binary buffer manipulation library used widely in OCaml network stacks and the MirageOS unikernel ecosystem; improper index handling can bypass the library's internal bounds logic, exposing adjacent memory or corrupting buffer state. No public exploit code has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.
Index mishandling in the OCaml cstruct library before 6.3.0 allows network-reachable attackers to trigger partial confidentiality, integrity, and availability impacts via crafted binary data passed to affected parsing routines. cstruct is a low-level binary buffer manipulation library used widely in OCaml network stacks and the MirageOS unikernel ecosystem; improper index handling can bypass the library's internal bounds logic, exposing adjacent memory or corrupting buffer state. No public exploit code has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.