CVE-2026-89087

High

The cstruct package before 6.3.0 for OCaml mishandles indexes.

mitre·CWE-573·Published 2026-09-10

CVSS

7.3

EPSS

0.00

KEV

Exploits

cve.orgen

62 chars

The cstruct package before 6.3.0 for OCaml mishandles indexes.

NVDen

62 chars

The cstruct package before 6.3.0 for OCaml mishandles indexes.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
3.1	Secondary	NVD	7.3	3.9	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L