PT-2026-70225 · Tesseract · Tesseract
CVE-2026-73067
·
Published
2026-08-11
·
Updated
2026-08-30
CVSS v4.0
6.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Tesseract versions prior to 5.5.3
Description
A heap out-of-bounds read occurs when a crafted
.traineddata model is loaded through the TessBaseAPI::Init function. This happens because SquishedDawg::read squished dawg() in src/dict/dawg.cpp accepts an unterminated forward-edge run. Subsequently, SquishedDawg::Load() calls num forward edges(0), and last edge in src/dict/dawg.h reads beyond the edges variable, leading to a process crash before image processing begins.Recommendations
Update to version 5.5.3.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tesseract