Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

tesseract — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in tesseract, with AI-generated Chinese analysis, references, and POCs.

Vendor: tesseract-ocr

CVE ID Title CVSS Severity Published
CVE-2026-119341 Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor CWE-763 - - 2026-10-30
CVE-2026-119340 Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions CWE-190 5.5 Medium 2026-10-30
CVE-2026-119339 Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service CWE-20 5.5 Medium 2026-10-30
CVE-2026-119338 Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages CWE-125 6.9 Medium 2026-10-30
CVE-2026-88054 Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load CWE-125 6.9 Medium 2026-09-10
CVE-2026-88053 Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata CWE-787 8.6 High 2026-09-10
CVE-2026-88052 Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization CWE-129 7.8 High 2026-09-10
CVE-2026-88051 Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields CWE-787 8.6 High 2026-09-10
CVE-2026-88050 Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values CWE-787 6.9 Medium 2026-09-10
CVE-2026-88049 Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch CWE-787 8.6 High 2026-09-10
CVE-2026-88048 Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch CWE-125 8.6 High 2026-09-10
CVE-2026-88047 Tesseract: ReadNormProtos stack buffer overflow CWE-121 8.6 High 2026-09-10
CVE-2026-73067 Tesseract: Heap OOB read in the DAWG loader CWE-125 6.7 Medium 2026-08-11
CVE-2026-73066 Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata CWE-787 6.8 Medium 2026-08-11

All 14 known CVE vulnerabilities affecting tesseract with full Chinese analysis, references, and POCs where available.