Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tesseract-ocr — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting tesseract-ocr. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates known security vulnerabilities affecting the Tesseract-OCR optical character recognition engine, categorized by weakness type and tagged with relevant security identifiers. The collection encompasses historical and recent flaws reported across multiple versions of the software, covering a time range from its early open-source releases through the current stable branch. Visitors can utilize this resource to track official vendor advisories, understand the prevalence of specific weakness classes such as memory corruption or denial of service within image processing libraries, and review the complete vulnerability history for the Tesseract product line. The data presented here supports security researchers, system administrators, and developers in assessing risk exposure and planning necessary mitigation strategies without relying on fragmented sources. By centralizing these disclosures, the page facilitates a clearer view of how security issues evolve over time within this widely used open-source project. Users seeking to harden their deployments or audit dependencies will find essential context regarding the nature and impact of reported defects. This compilation serves as a factual reference for understanding the security posture of Tesseract-OCR, enabling informed decision-making for organizations that depend on its capabilities for text extraction from digital images.

Top products by tesseract-ocr: tesseract
CVE ID Title CVSS Severity Published
CVE-2026-119341 Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor — tesseract CWE-763 - - 2026-10-30
CVE-2026-119340 Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions — tesseract CWE-190 5.5 Medium 2026-10-30
CVE-2026-119339 Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service — tesseract CWE-20 5.5 Medium 2026-10-30
CVE-2026-119338 Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages — tesseract CWE-125 6.9 Medium 2026-10-30
CVE-2026-88054 Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load — tesseract CWE-125 6.9 Medium 2026-09-10
CVE-2026-88053 Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata — tesseract CWE-787 8.6 High 2026-09-10
CVE-2026-88052 Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization — tesseract CWE-129 7.8 High 2026-09-10
CVE-2026-88051 Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields — tesseract CWE-787 8.6 High 2026-09-10
CVE-2026-88050 Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values — tesseract CWE-787 6.9 Medium 2026-09-10
CVE-2026-88049 Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch — tesseract CWE-787 8.6 High 2026-09-10
CVE-2026-88048 Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch — tesseract CWE-125 8.6 High 2026-09-10
CVE-2026-88047 Tesseract: ReadNormProtos stack buffer overflow — tesseract CWE-121 8.6 High 2026-09-10
CVE-2026-73067 Tesseract: Heap OOB read in the DAWG loader — tesseract CWE-125 6.7 Medium 2026-08-11
CVE-2026-73066 Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata — tesseract CWE-787 6.8 Medium 2026-08-11

This page lists every published CVE security advisory associated with tesseract-ocr. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.