Vulnerabilities

TI-2026-83397 CVE-2026-119341

Invalid pointer release in Tesseract OCR enables memory corruption

MEDIUM 42

Tesseract is an open source OCR engine.

CVSS 3.1N/A 0.0 Network No auth No interaction EPSS 0.0027 Published 2026-10-30 Partial fix · 5.5.3 CWE-763

TI-2026-83396 CVE-2026-119340

Tesseract accepts negative matrix dimensions when loading traineddata

LOW 24

Tesseract is an open source OCR engine.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00121 Published 2026-10-30 Partial fix · 5.5.4 CWE-190

TI-2026-83385 CVE-2026-119339

Improper input validation in tesseract-ocr tesseract

LOW 24

Tesseract is an open source OCR engine.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00165 Published 2026-10-30 Partial fix · 5.5.4 CWE-20

TI-2026-83384 CVE-2026-119338

Double free and use after free in Tesseract PAGE XML renderer

MEDIUM 64

Tesseract is an open source OCR engine.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00138 Published 2026-10-30 Partial fix · 5.5.4 CWE-125

TI-2026-60074 CVE-2026-88054

Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load

MEDIUM 64

Tesseract is an open source OCR engine.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00153 Published 2026-09-10 Fix deferred CWE-125

TI-2026-60073 CVE-2026-88053

Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata

HIGH 72

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00171 Published 2026-09-10 Fixed CWE-787

TI-2026-60072 CVE-2026-88052

Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization

LOW 35

Tesseract is an open source OCR engine.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00174 Published 2026-09-10 Fixed CWE-129

TI-2026-60071 CVE-2026-88051

Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields

HIGH 72

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00167 Published 2026-09-10 Fixed CWE-787

TI-2026-60070 CVE-2026-88050

Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values

MEDIUM 64

Tesseract is an open source OCR engine.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.0015 Published 2026-09-10 Fix deferred CWE-787

TI-2026-60069 CVE-2026-88049

Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

HIGH 72

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.0015 Published 2026-09-10 Fixed CWE-787

TI-2026-60068 CVE-2026-88048

Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

HIGH 72

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.0017 Published 2026-09-10 Fixed CWE-125

TI-2026-60067 CVE-2026-88047

Tesseract: ReadNormProtos stack buffer overflow

LOW 38

Tesseract is an open source OCR engine.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00115 Published 2026-09-10 Fixed CWE-121

TI-2026-51274 CVE-2026-73067

Tesseract: Heap OOB read in the DAWG loader

LOW 29

Tesseract is an open source OCR engine.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00126 Published 2026-08-11 Fixed in 5.5.3 CWE-125

TI-2026-51273 CVE-2026-73066

Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata

LOW 29

Tesseract is an open source OCR engine.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00126 Published 2026-08-11 Fixed in 5.5.3 CWE-787

TI-2022-17932 CVE-2022-38266 · GHSA-xgw2-h7jv-85pm

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an…

LOW 32

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01559 Published 2022-09-09 Fix deferred CWE-369

TI-2021-14531 CVE-2021-36081 · GHSA-5x29-fwcc-jm29

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

LOW 36

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0089 Published 2021-07-01 No fix listed CWE-416

TI-2011-00989 CVE-2011-1136 · GHSA-mr6c-m5m7-mvxj

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing…

LOW 22

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00455 Published 2019-11-14 No fix listed CWE-59

Vulnerabilities

Filters