Skip to contentTesseract-ocr Tesseract vulnerabilities
- tesseract-ocr tesseractTesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructorCVE-2026-1193410.0 None
- tesseract-ocr tesseractTesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensionsCVE-2026-1193405.5 Medium
- tesseract-ocr tesseractTesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of ServiceCVE-2026-1193395.5 Medium
- tesseract-ocr tesseractTesseract: Double free and use after free in the PAGE XML renderer on right-to-left pagesCVE-2026-1193386.9 Medium
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Denial of service via empty-stack dereference in Plumbing/Series at model loadCVE-2026-88054Fix available6.9 Medium
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddataCVE-2026-88053Fix available8.6 High
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronizationCVE-2026-88052Fix available7.8 High
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fieldsCVE-2026-88051Fix available8.6 High
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code valuesCVE-2026-88050Fix available6.9 Medium
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatchCVE-2026-88049Fix available8.6 High
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatchCVE-2026-88048Fix available8.6 High
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: ReadNormProtos stack buffer overflowCVE-2026-88047Fix available8.6 High
- tesseract-ocr tesseractTesseract: Heap OOB read in the DAWG loaderCVE-2026-73067Fix available6.7 Medium
- tesseract-ocr tesseractTesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddataCVE-2026-73066Fix available6.8 Medium
- leptonica, debian linux, tesseract-ocr tesseract ocr +2 moreAn issue in the Leptonica linked library (v1.79.0) in Tesseract v5.0.0 allows attackers to cause...CVE-2022-38266Fix available6.5 Medium
- tesseract-ocr tesseract ocrTesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.CVE-2021-36081Fix available7.8 High
- debian linux, tesseract-ocr tesseract ocr +1 moreIn tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID...CVE-2011-1136Fix available4.7 Medium