tesseract-ocr

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

tesseract-ocr records in CISA KEV

No tesseract-ocr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tesseract Ocr 11 records HIGH

Records

11 records in Tesseract Ocr · all components

TI-2026-60073 CVE-2026-88053

Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata

HIGH 72

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00171 Published 2026-09-10 Fixed CWE-787

TI-2026-60071 CVE-2026-88051

Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields

HIGH 72

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00167 Published 2026-09-10 Fixed CWE-787

TI-2026-60069 CVE-2026-88049

Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

HIGH 72

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.0015 Published 2026-09-10 Fixed CWE-787

TI-2026-60068 CVE-2026-88048

Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

HIGH 72

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.0017 Published 2026-09-10 Fixed CWE-125

TI-2026-60074 CVE-2026-88054

Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load

MEDIUM 64

Tesseract is an open source OCR engine.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00153 Published 2026-09-10 Fix deferred CWE-125

TI-2026-60070 CVE-2026-88050

Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values

MEDIUM 64

Tesseract is an open source OCR engine.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.0015 Published 2026-09-10 Fix deferred CWE-787

TI-2026-60067 CVE-2026-88047

Tesseract: ReadNormProtos stack buffer overflow

LOW 38

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00115 Published 2026-09-10 Fixed CWE-121

TI-2021-14531 CVE-2021-36081 · GHSA-5x29-fwcc-jm29

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

LOW 36

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0089 Published 2021-07-01 No fix listed CWE-416

TI-2026-60072 CVE-2026-88052

Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization

LOW 35

Tesseract is an open source OCR engine.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00174 Published 2026-09-10 Fixed CWE-129

TI-2022-17932 CVE-2022-38266 · GHSA-xgw2-h7jv-85pm

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an…

LOW 32

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01546 Published 2022-09-09 Fix deferred CWE-369

TI-2011-00989 CVE-2011-1136 · GHSA-mr6c-m5m7-mvxj

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing…

LOW 22

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00455 Published 2019-11-14 No fix listed CWE-59

Open these records in search →

Critical	0
High	7
Medium	9
Low	0
No CVSS	1