What’s Vulnerable › Products
tesseract-ocr tesseract vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your tesseract-ocr tesseract version is affected
Latest tesseract-ocr tesseract vulnerabilities
- CVE-2026-119341 — Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor (CVSS 0.0)
- CVE-2026-119340 — Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions (CVSS 5.5)
- CVE-2026-119339 — Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service (CVSS 5.5)
- CVE-2026-119338 — Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages (CVSS 6.9)
- CVE-2026-88054 — Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load (CVSS 5.5)
- CVE-2026-88053 — Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata (CVSS 7.8)
- CVE-2026-88052 — Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization (CVSS 7.8)
- CVE-2026-88051 — Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields (CVSS 7.8)
- CVE-2026-88050 — Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values (CVSS 5.5)
- CVE-2026-88049 — Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch (CVSS 5.5)
- CVE-2026-88048 — Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch (CVSS 7.1)
- CVE-2026-88047 — Tesseract: ReadNormProtos stack buffer overflow (CVSS 7.8)
- CVE-2026-73067 — Tesseract: Heap OOB read in the DAWG loader (CVSS 6.7)
- CVE-2026-73066 — Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata (CVSS 6.8)
- CVE-2022-38266 — (CVSS 6.5)
- CVE-2021-36081 — (CVSS 7.8)
- CVE-2011-1136 — (CVSS 4.7)