unknown · EPSS 0.0027

CVE-2026-119341

Tesseract OCR engine before 5.5.4 can suffer memory corruption when processing a pre‑adapted template file, leading to a denial‑of‑service.

Overview

Tesseract OCR engine before 5.5.4 can suffer memory corruption when processing a pre‑adapted template file, leading to a denial‑of‑service. The flaw occurs in ReadAdaptedClass when legacy mode is enabled and attacker‑controlled .a files are parsed. It affects all Tesseract 5.x releases that allow pre‑adapted templates.

Description

Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT_CLASS_STRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any destructor path. When the legacy engine is selected, classify_use_pre_adapted_templates is enabled, and an attacker can write the output-basename .a file, the success or rejection path can pass file-controlled pointers to ~ADAPT_CLASS_STRUCT and operator delete, causing memory corruption and denial of service. This issue is fixed in version 5.5.4.

Impact

The vulnerability can corrupt memory and crash the OCR process, compromising availability and potentially integrity if the crash is exploited in a broader workflow. Defenders using Tesseract in services that accept untrusted input are at risk of service interruption.

Remediation

Upgrade to Tesseract 5.5.4 or later. If an upgrade is not immediately possible, disable the classify_use_pre_adapted_templates option or reject any user‑supplied .a files before they reach the OCR engine. Apply any vendor‑issued patches as soon as they are released.

Risk context

With an EPSS score of 0.0027 and no CVSS rating, the likelihood of exploitation is low, but the impact is a denial of service. Defenders should monitor for any updates but the urgency is moderate.

Affected products

  • Tesseract OCR 5.5.3
  • Tesseract OCR 5.5.2
  • Tesseract OCR 5.5.1
  • Tesseract OCR 5.5.0
  • Tesseract OCR 5.4.x
  • Tesseract OCR 5.3.x
  • Tesseract OCR 5.2.x
  • Tesseract OCR 5.1.x

Scores

Severity
unknown
CVSS v2
—
CVSS v3
—
CVSS v4
—
EPSS
0.0027

memory-corruption denial-of-service tesseract ocr low-risk

← All CVEs

Related CVEs

unknown

CVE-2026-120988

billboard.js before 4.1.3 is vulnerable to cross‑site scripting due to improper sanitization of series ids during legend template rendering. An attacker can inject malicious JavaScript when the chart is rendered, potentially compromising the web application. The flaw affects any site that uses billboard.js for data visualization.

View analysis

unknown

CVE-2026-99188

A vulnerability in the Linux kernel's stmmac network driver causes an interrupt storm during system resume from sleep states. This occurs because the RGMII status interrupt is not cleared, leading to CPU starvation and potential system hangs or watchdog resets on affected hardware.

View analysis

unknown

CVE-2026-99206

A race condition in the Linux kernel's iSCSI target discovery module allows concurrent configfs operations to trigger a double-free vulnerability. This flaw occurs when multiple processes simultaneously update the discovery AuthMethod parameter without proper synchronization. It poses a stability and security risk to systems exposing iSCSI targets via the kernel's target subsystem.

View analysis

unknown

CVE-2026-99148

A reference counting flaw in the Linux kernel's amdgpu driver allows a Buffer Object (BO) to be evicted while user-space GPU queues still hold active mappings. This occurs because the eviction fence is detached when any handle to the BO is closed, rather than only when the last reference to the underlying virtual address space is released. The issue can lead to use-after-free conditions or GPU hangs on systems using AMD graphics hardware.

View analysis