CVE-2026-88054

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.4

Description A flaw exists in the Plumbing::DeSerialize function within src/lstm/plumbing.cpp that allows a crafted .traineddata model to contain a zero-length stack for NT SERIES, NT PARALLEL, or NT REVERSED layers. During LSTMRecognizer initialization in src/lstm/lstmrecognizer.cpp, the CacheXScaleFactor(XScaleFactor()) process calls Series::CacheXScaleFactor in src/lstm/series.cpp, which attempts to dereference stack [0] on an empty vector. This results in the invocation of a virtual method via an invalid Network pointer, leading to a deterministic crash and denial of service when the model is loaded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.