https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:55:46.154010+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351127 EUVD-2026-351127 2026-10-02T14:55:46.159976+00:00 EUVD-2026-351127 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73067 fkie_cve-2026-73067 2026-10-02T14:55:46.160009+00:00

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls num_forward_edges(0) and last_edge in src/dict/dawg.h reads beyond edges_, causing a heap out-of-bounds read and process crash before image processing. This issue is fixed in version 5.5.3.

 https://cve.radiocsirt.org/vuln/oesa-2026-3569 OESA-2026-3569 — tesseract security update 2026-10-02T14:55:46.160040+00:00

Affected: openEuler:24.03-LTS-SP4: tesseract

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es):

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-bounds write during OCR recognition. This issue is fixed in version 5.5.3.(CVE-2026-73066)

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls num_forward_edges(0) and last_edge in src/dict/dawg.h reads beyond edges_, causing a heap out-of-bounds read and process crash before image processing. This issue is fixed in version 5.5.3.(CVE-2026-73067)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11887-1 openSUSE-SU-2026:11887-1 — libtesseract5-5.5.3-2.1 on GA media 2026-10-02T14:55:46.160073+00:00

libtesseract5-5.5.3-2.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73067 UBUNTU-CVE-2026-73067 2026-10-02T14:55:46.160093+00:00

Affected: Ubuntu:14.04:LTS: tesseract, Ubuntu:16.04:LTS: tesseract, Ubuntu:18.04:LTS: tesseract, Ubuntu:20.04:LTS: tesseract, Ubuntu:22.04:LTS: tesseract, Ubuntu:24.04:LTS: tesseract, Ubuntu:26.04:LTS: tesseract

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls num_forward_edges(0) and last_edge in src/dict/dawg.h reads beyond edges_, causing a heap out-of-bounds read and process crash before image processing. This issue is fixed in version 5.5.3.