Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-119339— Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service

Quick assessment

Affected
tesseract-ocr tesseract
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Tesseract 是一款开源的光学字符识别（OCR）引擎。在 5.5.4 版本之前， 会信任来自 traineddata LSTM 网络的模式字节（mode byte）；当 未设置时，它会调用 。在默认的 FAST_FLOAT 构建版本中， 不会返回错误，而是直接触发 断言。因此，通过 加载一个恶意构造的模型会导致进程终止，从而引发拒绝服务（DoS）漏洞。该问题已在 5.5.4 版本中修复。

CVSS 5.5 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-119339

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service
Source: CVE Program / CVE List V5
Vulnerability Description
Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FAST_FLOAT builds, DeSerializeOld invokes ASSERT_HOST instead of returning an error, so loading a crafted model through TessBaseAPI::Init terminates the process and causes denial of service. This issue is fixed in version 5.5.4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
tesseract-ocr tesseract < 5.5.4 -

II. Public POCs for CVE-2026-119339

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-119339

请登录查看更多情报信息。

Other References for CVE-2026-119339 (4)

Same Patch Batch · tesseract-ocr · 2026-10-30 · 4 CVEs total

CVE-2026-119338 6.9 MEDIUM Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages
CVE-2026-119340 5.5 MEDIUM Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negati
CVE-2026-119341 Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor

IV. Related Vulnerabilities

Same product: tesseract
Same vendor: tesseract-ocr
Same weakness: CWE-20