Tesseract-ocr vulnerabilities

Products

• Tesseract 14
• Tesseract Ocr 11

Newest

• tesseract-ocr tesseract Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor CVE-2026-119341 0.0 NoneOctober 30, 2026
• tesseract-ocr tesseract Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions CVE-2026-119340 5.5 MediumOctober 30, 2026
• tesseract-ocr tesseract Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service CVE-2026-119339 5.5 MediumOctober 30, 2026
• tesseract-ocr tesseract Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages CVE-2026-119338 6.9 MediumOctober 30, 2026
• tesseract-ocr tesseract, tesseract ocr +1 more Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load CVE-2026-88054 Fix available 6.9 MediumSeptember 10, 2026
• tesseract-ocr tesseract, tesseract ocr +1 more Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata CVE-2026-88053 Fix available 8.6 HighSeptember 10, 2026
• tesseract-ocr tesseract, tesseract ocr +1 more Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization CVE-2026-88052 Fix available 7.8 HighSeptember 10, 2026
• tesseract-ocr tesseract, tesseract ocr +1 more Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields CVE-2026-88051 Fix available 8.6 HighSeptember 10, 2026
• tesseract-ocr tesseract, tesseract ocr +1 more Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values CVE-2026-88050 Fix available 6.9 MediumSeptember 10, 2026
• tesseract-ocr tesseract, tesseract ocr +1 more Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch CVE-2026-88049 Fix available 8.6 HighSeptember 10, 2026
• tesseract-ocr tesseract, tesseract ocr +1 more Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch CVE-2026-88048 Fix available 8.6 HighSeptember 10, 2026
• tesseract-ocr tesseract, tesseract ocr +1 more Tesseract: ReadNormProtos stack buffer overflow CVE-2026-88047 Fix available 8.6 HighSeptember 10, 2026
• tesseract-ocr tesseract Tesseract: Heap OOB read in the DAWG loader CVE-2026-73067 Fix available 6.7 MediumAugust 11, 2026
• tesseract-ocr tesseract Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata CVE-2026-73066 Fix available 6.8 MediumAugust 11, 2026
• leptonica, debian linux, tesseract-ocr tesseract ocr +2 more An issue in the Leptonica linked library (v1.79.0) in Tesseract v5.0.0 allows attackers to cause... CVE-2022-38266 Fix available 6.5 MediumSeptember 9, 2022
• tesseract-ocr tesseract ocr Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call. CVE-2021-36081 Fix available 7.8 HighJuly 1, 2021
• debian linux, tesseract-ocr tesseract ocr +1 more In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID... CVE-2011-1136 Fix available 4.7 MediumNovember 14, 2019