Log in Start free

tesseract-ocr

Products

ProductCVEsExploitedLatest
tesseract14–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-119341 None 0.0 Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor 0.3%
  • CVE-2026-119340 Medium 5.5 Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions 0.1%
  • CVE-2026-119339 Medium 5.5 Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service 0.2%
  • CVE-2026-119338 Medium 6.9 Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages 0.1%
  • CVE-2026-88054 Medium 6.9 Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load 0.2%
  • CVE-2026-88053 High 8.6 Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata 0.2%
  • CVE-2026-88052 High 7.8 Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization 0.2%
  • CVE-2026-88051 High 8.6 Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields 0.2%
  • CVE-2026-88050 Medium 6.9 Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values 0.1%
  • CVE-2026-88049 High 8.6 Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch 0.1%
  • CVE-2026-88048 High 8.6 Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch 0.2%
  • CVE-2026-88047 High 8.6 Tesseract: ReadNormProtos stack buffer overflow 0.1%
  • CVE-2026-73067 Medium 6.7 Tesseract: Heap OOB read in the DAWG loader 0.1%
  • CVE-2026-73066 Medium 6.8 Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata 0.1%