Tesseract-Ocr Tesseract Ocr
11 CVEs affecting Tesseract-Ocr Tesseract Ocr. Latest disclosed: 2026-09-10. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-88053 | High | 7.8 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses… |
CVE-2026-88052 | High | 7.8 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count… |
CVE-2026-88051 | High | 7.8 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independ… |
CVE-2026-88047 | High | 7.8 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of… |
CVE-2021-36081 | High | 7.8 | 2021-07-01 | Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call. |
CVE-2026-88048 | High | 7.1 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserial… |
CVE-2022-38266 | Medium | 6.5 | 2022-09-09 | An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG fi… |
CVE-2026-88054 | Medium | 5.5 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks b… |
CVE-2026-88050 | Medium | 5.5 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length_ but accepts… |
CVE-2026-88049 | Medium | 5.5 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and Ne… |
CVE-2011-1136 | Medium | 4.7 | 2019-11-14 | In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file. |