What’s Vulnerable › Vulnerabilities

CVE-2021-36081

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-07-01 · updated 2026-09-14
• Weakness: CWE-416

Description

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

Affected products

• tesseract-ocr tesseract: 5.0.0-alpha-20201231

References

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698
• https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tesseract-ocr/OSV-2021-211.yaml
• https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8ef66f03b2d55
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698
• https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tesseract-ocr/OSV-2021-211.yaml
• https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8ef66f03b2d55

Get alerted when CVE-2021-36081 or the next vulnerability affects your stack