Process-memory disclosure via unchecked dimension multiplication

Integer overflow in OCaml Bigarray.reshape through 4.14.3 allows local users to read arbitrary process memory via crafted dimensions. The caml_ba_reshape runtime function multiplies user-supplied dimensions without checking whether the product exceeds the integer range, then accepts a nonsensical shape that permits out-of-bounds reads. Exploitation requires an OCaml program to pass attacker-controlled dimension values to Bigarray.reshape; the disclosure is limited to memory readable within that process.