CVE-2026-119341— Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor

Quick assessment

Affected

tesseract-ocr tesseract

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Tesseract 是一款开源的光学字符识别（OCR）引擎。在 5.5.4 版本之前，其中的函数在从预适配模板文件原始读取结构时，未在任何析构路径之前对和指针字段进行净化处理。当启用旧版引擎并开启选项，且攻击者能够写入输出文件名对应的文件时，无论是成功路径还是拒绝路径，均可能将攻击者控制的文件指针传递给析构函数和，从而导致内存损坏和拒绝服务（DoS）。该问题已在 5.5.4 版本中修复。

Possible ATT&CK Techniques 2 AI

T1562.006 T1190 · Exploit Public-Facing Application

Updated Oct 31, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor

Source: CVE Program / CVE List V5

Vulnerability Description

Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT_CLASS_STRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any destructor path. When the legacy engine is selected, classify_use_pre_adapted_templates is enabled, and an attacker can write the output-basename .a file, the success or rejection path can pass file-controlled pointers to ~ADAPT_CLASS_STRUCT and operator delete, causing memory corruption and denial of service. This issue is fixed in version 5.5.4.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

对无效指针或索引的释放

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
tesseract-ocr	tesseract	< 5.5.3	-

II. Public POCs for CVE-2026-119341

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-119341

请登录查看更多情报信息。

Other References for CVE-2026-119341 (4)

https://github.com/tesseract-ocr/tesseract/pull/4645 x_refsource_MISC
https://github.com/tesseract-ocr/tesseract/releases/tag/5.5.4 x_refsource_MISC
https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-357f-833m-3f83 x_refsource_CONFIRM
https://github.com/tesseract-ocr/tesseract/commit/614e971036d2b95d521057ff63d68d6612429b23 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-119341

Same Patch Batch · tesseract-ocr · 2026-10-30 · 4 CVEs total

CVE-2026-119338	6.9 MEDIUM	Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages
CVE-2026-119339	5.5 MEDIUM	Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `
CVE-2026-119340	5.5 MEDIUM	Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negati

IV. Related Vulnerabilities

Same product: tesseract

Same vendor: tesseract-ocr

Same weakness: CWE-763